FIPS-CC and enabling ports | 71F
Question: FIPS-CC is enabled. The interface is up. Why can’t I set allowaccess to permit https on port 1 for GUI access?
The Background:
I don’t have any FortiOS experience. I’ve been given a 71F to configure. The documentation describes enabling FIPS-CC, setting a new administrator password, and enabling the ports via
config system interface
edit internal1
set status up
end
followed by changing the allowaccess attributes to add https via set or append
set allowaccess ping https
Neither append nor set allow me to do so, and set ? doesn’t list allowaccess as an option. the internal1 (port1) was part of a virtual switch. i’ve since removed it:
config system virtual-switch
edit “internal”
config port
delete internal1
end
a ‘show’ command after each ‘end’ reflects that the configurations were accepted - internal1 is up and removed from the virtual-switch. if i `show full-configuration system interface | grep -f internal1’, i get the following attributes.
config system interface
edit "internal1" <---
set vdom "root"
set dhcp-classless-route-addition disable
set status up
set type physical
set trunk disable
set description ''
set alias ''
set ike-saml-server ''
set role undefined
set snmp-index 4
set eap-supplicant disable
set speed auto
next
end
What am I missing to permit allowaccess?
