Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
//Chura CCIE, NSE7, CCSE+
To avoid having duplicate MAC addresses on your network, make sure you assign each physical interface a virtual active and standby MAC address.
In order to do what I am thinking of doing, in transparent mode, the only way to achieve this is to create two separate vdoms. unfortunately this also means you have to recreate all your policies twice, once per vdom, and there is no way to replicate policies accross each vdom. except for some export/import via cli but that only helps for some of the configurationMore than one person here will tell you to load a backup of the config into a text editor, copy the relevant sections of the config into a separate text file -- edit the references of this new section, then paste it back into the new vdom location in the original config. (If you plan to do this, I suggest back up the original config then split the fgt into two vdoms and save/use that config.) Edit: it will be more involving setting up the new vdom and getting the interfaces properly matching under old/new sections, so not quite sure what is involved.
NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
800C (IPS) # show system port-pair config system port-pair edit " BB-50" set member " BB-50_north" " BB-50_south" next edit " BB-64" set member " BB-64_north" " BB-64_south" next end 800C (IPS) # show system interface BB-50_north config system interface edit " BB-50_north" set vdom " IPS" set forward-domain 50 set interface " port1" set vlanid 50 next end 800C (IPS) # show system interface BB-50_south config system interface edit " BB-50_south" set vdom " IPS" set forward-domain 50 set interface " wan1" set vlanid 50 next end 800C (IPS) # show system interface BB-64_north config system interface edit " BB-64_north" set vdom " IPS" set forward-domain 64 set interface " port1" set vlanid 64 next end 800C (IPS) # show system interface BB-64_south config system interface edit " BB-64_south" set vdom " IPS" set forward-domain 64 set interface " wan1" set vlanid 64 next end 800C (IPS) #Regards, Matthew Mollenhauer
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1536 | |
1029 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.