Technical Note: Set Interface(s) to be physically down using FortiGate Link-Monitor

[rakanda]

Description

FortiGate gateway detect link-monitor behaviour

    Fail - Bring down the independent interface(s)

    Suceed - Bring up the independent interface(s)

In FortiGate v5.4, 5.6 the source IP can be added for each link-monitor probe from the CLI setting.

Solution

You can bring down other interface like "dmz"

# config system link-monitor

    edit "sasd"

      set srcintf "wan2"

      set server "8.8.8.8"

      set protocol ping

      set update-cascade-interface enable <-- bring down "dmz"

    next

  end

# config system interface

    edit "wan2"

      set fail-detect enable

      set fail-detect-option detectserver

      set fail-alert-interfaces "dmz"

    next

  end

- Following command can be used to monitor the status of probe server

# diagnose system link-monitor status