Technical Note: Set Interface(s) to be physically down using FortiGate Link-Monitor
Description
FortiGate gateway detect link-monitor behaviour
Fail - Bring down the independent interface(s)
Suceed - Bring up the independent interface(s)
In FortiGate v5.4, 5.6 the source IP can be added for each link-monitor probe from the CLI setting.
Solution
You can bring down other interface like "dmz"
# config system link-monitor
edit "sasd"
set srcintf "wan2"
set server "8.8.8.8"
set protocol ping
set update-cascade-interface enable <-- bring down "dmz"
next
end
# config system interface
edit "wan2"
set fail-detect enable
set fail-detect-option detectserver
set fail-alert-interfaces "dmz"
next
end
- Following command can be used to monitor the status of probe server
# diagnose system link-monitor status
