Skip to main content
canoas
canoas
Visitor III
January 4, 2025
Solved

Installing 1 policy from FM to FGT Clusters with different interfaces names

  • January 4, 2025
  • 1 reply
  • 853 views

Hi there!

 

Is it possible to install the same single policy to say 5 FGT Clusters from Forti Mrg, but each of the 5 Clusters has different interface names? The same single policy will be pushed to each Cluster as a Global FW policy not a VDOM.............or is the only way via a VDOM with normalized interfaces from the FM? later mapping INTERNAL interface to Port1 on Cluster-1 and INTERNAL3 on Cluster-2 etc.........

 

 

    Best answer by dingjerry_FTNT

    Hi @canoas ,

     

    Another way is:

     

    1) Create a Zone object on the FGT Clusters including those interfaces as members.  It's OK even if there is only one interface.

     

    2) Importing the FGT clusters.  If the FGT clusters are in FMG already, you may re-import them again.  This step will import the Zone object and dynamic mapping different interface members based on those FGT clusters.

    1 reply

    dingjerry_FTNT
    Staff
    dingjerry_FTNTAnswer
    Staff
    January 5, 2025

    Hi @canoas ,

     

    Another way is:

     

    1) Create a Zone object on the FGT Clusters including those interfaces as members.  It's OK even if there is only one interface.

     

    2) Importing the FGT clusters.  If the FGT clusters are in FMG already, you may re-import them again.  This step will import the Zone object and dynamic mapping different interface members based on those FGT clusters.

      canoas
      canoasAuthor
      Visitor III
      January 5, 2025

      I think this maybe the most straight forward solution, though I have found re-iimporting clusters into FM again problematic in the past, perhaps with v7.x I won't have these issues. Thanks.

      Terms & ConditionsAccessibility statement