Skip to main content
StevenT
StevenT
Explorer II
September 28, 2023
Question

Use MGMT interface to pass through the TACACS on standalone fgt

  • September 28, 2023
  • 1 reply
  • 1905 views

Hi,

 

Does anyone have any solution or idea on this?

 

Standalone fortigate on 7.2.5.

Added the TACACS configuration as per the guide in this forum.

 

When we check the route, it is passing through another data port, not the dedicated mgmt port.

I had found quite a lot on HA direct but our setup is only Standalone. 
We had try input source-ip but having this issue.

 

node_check_object fail! for source-ip x.x.x.x

 

 

1 reply

xshkurti
Staff
xshkurti
Staff
September 28, 2023

@StevenT 
Normally in HA you can reserve mgmt interface to be dedicated only to management.
This means that it is only reserved for that purpose.
In HA, routing table is handled by primary node. Secondary node has no active routing table and for this purpose, you have to configure mgmt port on HA settings and add a default route so that port can use different path than normal traffic and not depending on normal FGT routing table.

In Standalone FGT this issue is not present, so you dont have to create an isolated routing table for Mgmt interface.

For your issue, can you please check if tacacs is reachable from MGMT interface?
do a simple ping with source option and see what is happening.
Do you have routing in place?

Terms & ConditionsAccessibility statement
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!