CHANGED SUBNET FROM LAN TO WAN

[ExPORT]

Hello Everyone,

I changed the fortinet device interface settings unintentionally.
I have changed the subnet from LAN to WAN and lost access to interface.

I got a console cable and can connect to fortigate via Putty terminal.
How can I reverse this?
Below is my system info; your help is much appreciated.

# show system interface
config system interface
edit "wan"
set vdom "root"
set ip 192.168.1.99 255.255.255.0
set allowaccess ping https ssh http telnet
set type physical
set role wan
set snmp-index 1
config ipv6
set ra-send-mtu disable
end
next
edit "lan1"
set vdom "root"
set type physical
set snmp-index 2
next
edit "lan2"
set vdom "root"
set type physical
set snmp-index 3
next
edit "lan3"
set vdom "root"
set type physical

Remet # show system interface
config system interface
edit "wan"
set vdom "root"
set ip 192.168.1.99 255.255.255.0
set allowaccess ping https ssh http telnet
set type physical
set role wan
set snmp-index 1
config ipv6
set ra-send-mtu disable
end
next
edit "lan1"
set vdom "root"
set type physical
set snmp-index 2
next
edit "lan2"
set vdom "root"
set type physical
set snmp-index 3
next
edit "lan3"
set vdom "root"
set type physical
set alias "FortiGate-40F"
set snmp-index 4
next
edit "a"
set vdom "root"
set type physical
set snmp-index 5
next
edit "modem"
set vdom "root"
set status down
set type physical
set snmp-index 6
config ipv6
set ra-send-mtu disable
end
next
edit "naf.root"
set vdom "root"
set type tunnel
set src-check disable
set snmp-index 7
next
edit "l2t.root"
set vdom "root"
set type tunnel
set snmp-index 8
next
edit "ssl.root"
set vdom "root"
set type tunnel
set alias "SSL VPN interface"
set snmp-index 9
next
edit "lan"
set vdom "root"
set ip 192.168.2.1 255.255.255.0
set allowaccess ping https ssh fgfm
set type hard-switch
set stp enable
set device-identification enable
set lldp-transmission enable
set role lan
set snmp-index 10
config ipv6
set ra-send-mtu disable
set ip6-send-adv enable
set ip6-other-flag enable
end
next
edit "fortilink"
set vdom "root"
set allowaccess ping fabric
set status down
set type aggregate
set lldp-reception enable
set lldp-transmission enable
set snmp-index 11
config ipv6
set ra-send-mtu disable
end
next
edit "Guest"
set vdom "root"
set ip 10.10.10.1 255.255.255.0
set allowaccess ping
set device-identification enable
set role lan
set snmp-index 12
config ipv6
set ip6-send-adv enable
set ip6-other-flag enable
end
set interface "lan"
set vlanid 10
next
end

[hbac]

Hi @ExPORT,

What was the previous settings? Do you have a backup configuration before making changes? Do you know what was the IP address of the wan interface? Was it using static or DHCP IP? 

Regards, 

[ExPORT]

Hello Dear, It was 192.168.1.1:500 but now I cannot access through this. I omit taking a backup. I ned a remote session, would you minf helping me?

[abarushka]

Hello,

After changing interface role some configuration may be lost. In case of reverting interface role, some configuration may not revert. Therefore, after reverting interface role it necessary to check backup of the configuration for lost configuration.

[ExPORT]

Can you please do a remote session, I managed to access the devide through console cable.