Technical Tip: How to set up the management interf...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 364504

Description

This article describes how to configure the management interface on a FortiGate 7000F chassis.

Scope

FortiGate 7KF

Solution

The recommended steps when managing the FortiGate 7000F are:

Create lag in the mgmt-vdom.
One mgmt port should be selected among each FIM (for example, 1-mgmt2 and 2-mgmt2).
Use that lag to add slbc mgmt-int under 'config load-balance setting'.
A special mgmt port (for example, ssh 2202 and https 44304) will be usable via the lag in mgmt-vdom.

Here's an example:

chassis-7kf [FIM01] (mgmt-lag) # show
config system interface
    edit "mgmt-lag"
      set vdom "mgmt-vdom"
      set ip 10.1.4.10 255.255.255.0
      set type aggregate
      set member "1-mgmt2" "2-mgmt2"
      set lldp-transmission enable
    next
end

chassis-7kf [FIM01] (setting) # show
config load-balance setting
set slbc-mgmt-intf "mgmt-lag"
end

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: How to set up the management interface for a 7000F FortiGate