Management port ip

Forum|Forum|2 years ago
December 3, 2023
12 replies
4501 views

Hi

I have admin interface vlan on my fortigate port 1 and want to assign that ip range to management port too but it says ip conflicts. So how can i set ip address without using defsult gateway?

FortiGate

dbu

Staff

Hi @rezafathi ,
As per my understanding you want to configure IP from same network in two different Fortigate ports. You want to overlap the subnet between different interfaces
have a look at this article and let me know if it matches your situation :
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Overlapping-subnet-configuration-for-HA-Management/ta-p/270285

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-subnet-overlap-to-set-IP-addresses-of/ta-p/191639

rezafathiAuthor

Explorer III

Thanks but i do not want to use subnet overlap function. Currently, i created a vlan for mgmt and assigned it to switch. I did set the ip on mgmt and wrote a default gateway with priority 100. That way i can reach the web ui

dbu

Staff

Good to hear that you found the workaround for your situation.

hbac

Staff

Hi @rezafathi,

Why do you want to use the same subnet for 2 different interfaces? It is not necessary and not recommended. You can simply give it a different subnet.

If you want port1 and management port to be in the same subnet, you can put them in a hardware/software switch. https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/100999/hardware-switch

Regards,

rezafathiAuthor

Explorer III

I want to move all interface vlans to fortigate. So there would be no int vlan left on cisco switch. How can I assign a different vlan to mgmt port? I am really confused.

dbu

Staff

Here is how you can create sub interfaces for each of the VLANs in Fortigate :

https://docs.fortinet.com/document/fortigate/7.2.6/administration-guide/402940/vlan

Sign up

Login with SSO

Login to the community

Login with SSO