Skip to main content
aagrafi1
aagrafi1
Explorer
May 14, 2023
Question

FMG normalized interfaces with CLI

  • May 14, 2023
  • 4 replies
  • 3960 views

Hello,

 

I have to create dynamic mappings for 500+ interfaces in FMG and I'm looking for the CLI to do that, because it will take me 3 months to do it in the GUI.

 

I already have the dynamic mappings from the old FMG in CLI, which is:

 

diag dvm device dynobj  FG-1

=== VDOM root ===

config dynamic interface

edit vlan1902

config dynamic_mapping

edit "FG-1"-"root"

set local-intf "vlan1902"

next

end

next

end

...

 

But, I don’t know how to push this CLI to the target FMG. The command “config dynamic interface” simply does not work in the FMG.

 

Do you know the exact CLI to push the dynamic mappings for all normalized interfaces?

 

Thanks

Andreas 

4 replies

funkylicious
SuperUser
funkylicious
SuperUser
May 14, 2023

Normalized interfaces, are locally relevant on FMG not on FGT.

As you map a interface from a device to a dynamic interface and use it in a policy, then push that policy on the FGT, you will see locally on it that it uses the real interface and not the dynamic one.

So, in your case, you just need to create the normalized interface and map it for every device.

"jack of all trades, master of none"
aagrafi1
aagrafi1Author
Explorer
May 14, 2023

I'm afraid you didn't understand my question. I want to provision an FMG with 500 dynamic mappings. Can I do it in CLI?

crao
Staff
crao
Staff
October 27, 2023

I am also looking for the same information. So far, I have not been able to find anything concrete. As soon as I find something, I will share.

asrour
Staff
asrour
Staff
October 29, 2023

you can do Per-Platform-Mapping if you are using a unified names of the interfaces.

 

asrour
Staff
asrour
Staff
October 29, 2023

if the 500 dynamic interfaces are already created on the Fortigate, when you import the policies of that fortigate, the mapping will be created automatically

Terms & ConditionsAccessibility statement