Skip to main content
rb400
New Member
February 14, 2015
Solved

VDOM (noob) w/ nat

BACKGROUND:

Our goal is to use (external) BGP on our FGT 1000D (nat'd) using two existing ISPs.  BGP is functioning now via our customer side BGP router which we wish to eliminate as a point of failure. Because RPF is a problem when we add two ISP connections to our FGT, fortinet techs advised us to enable VDOM and enable asymmetric routing in the VDOM that faces the ISPs.

 

QUESTION:

We do not have a fortimanager, how can I copy (or move) all the "as-is" policies and interfaces from the root-VDOM to a new sub-VDOM?

 

Thank you in advance.

jb_kalm
jb_kalmAnswer
New Member
February 17, 2015

Hi, just wondering if you can copy the configuration from the CLI and use Notepad++ to change any conflicting variables. Then paste the new configuration into the new VDOM using the CLI?

 

Thanks,

 

jb

2 replies

jb_kalm
jb_kalmAnswer
New Member
February 17, 2015

Hi, just wondering if you can copy the configuration from the CLI and use Notepad++ to change any conflicting variables. Then paste the new configuration into the new VDOM using the CLI?

 

Thanks,

 

jb

Faulty_Male
New Member
February 18, 2015

As JB suggested - the CLI is your friend here.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT