Troubleshooting Tip: Changing firewall VIP on Fort...

FortiSRA

FortiSRA protects OT environments by providing a secure remote access solution designed for third-party contractors and remote employees. FortiSRA offers security features such as secure remote access, privileged credential management, session monitoring, web-based antivirus scanning, and a secure file manager

Article Id 409509

Description

This article describes how to change the IP address on the VIP.

Scope

FortiSRA.

Solution

While changing the IP address VIP on FortiSRA, the message 'extip can not be set manually when intf-ip-sync is enable' will be shown.

error message.jpg

As shown in the picture above, there is no 'intf-ip-sync' command; the reason is that the enable option is the default action. FortiOS will not show default commands on the CLI unless 'show full-configuration' is used.

Set the command 'intf-ip-sync' to disable first using the 'set intf-ip-sync disable' command.
Change the IP accordingly to the environment setup with 'set extip x.x.x.x'. In this example, the IP address 10.56.2.185 is being used.
Use 'end' to save the settings.

settings changed.jpg

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Troubleshooting Tip: Changing firewall VIP on FortiSRA

You are leaving our website