Skip to main content
rezafathi
Explorer III
December 7, 2023
Solved

200F Management port best practise

  • December 7, 2023
  • 5 replies
  • 3369 views

Hi

I have all my interface vlans on my 200f port1 and I am looking for a way to config mgmt port to connect to fortigate. What should i do?

Best answer by ndumaj

Hi Rezafathi,

You can configure:

config system interface

    edit mgmt
        set dedicated-to management
end
Please review the following articles:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-dedicated-mgmt-feature-Out-of-band/ta-p/193699
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Use-MGMT-port-inside-the-firewall-policy/ta-p/269794

-BR-

5 replies

ndumaj
Staff
ndumajAnswer
Staff
December 7, 2023

Hi Rezafathi,

You can configure:

config system interface

    edit mgmt
        set dedicated-to management
end
Please review the following articles:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-dedicated-mgmt-feature-Out-of-band/ta-p/193699
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Use-MGMT-port-inside-the-firewall-policy/ta-p/269794

-BR-

rezafathi
rezafathiAuthor
Explorer III
December 7, 2023

My 200f firewall has already have that feature enabled by default. Currently I can not access mgmt port without a static route (0.0.0.0/0 0.0.0.0 mgmt)

ndumaj
Staff
Staff
December 7, 2023

Did you access it after adding the static route?
-BR-

rezafathi
rezafathiAuthor
Explorer III
December 7, 2023

Yes

ndumaj
Staff
Staff
December 7, 2023

Great, nice to know about that for next time.

Thanks

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.