Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
bram_pangestu
New Contributor

Separate interface for management in Fortimail

Hello,

 

Is it possible if i want to create separate interface for management in Fortimail?
Example: i want to use ETH1 only as Management interface and ETH2 for traffic.

 

Thanks,

Bram

1 Solution
AEK
Honored Contributor

Hi Bram

I prefer avoid this because FML doesn't have policy routing. So yes you can  do that but you have to configure the right static routes. Example below:

- Default route must be via eth2 

- Add route to admin users subnets via eth1

- Add route to admin users VPN subnet via eth1

AEK

View solution in original post

AEK
3 REPLIES 3
AEK
Honored Contributor

Hi Bram

I prefer avoid this because FML doesn't have policy routing. So yes you can  do that but you have to configure the right static routes. Example below:

- Default route must be via eth2 

- Add route to admin users subnets via eth1

- Add route to admin users VPN subnet via eth1

AEK
AEK
bram_pangestu

Hi AEK,


Noted with thanks for explanation

Jakob-AHHG

Hmm, if you have an interface with IP in a management interface, and one in a DMZ, you can simply disable HTTP(S)/SSH/SNMP on the DMZ interface.
 
But maybe you should use Interface1 as the mail interface, and then add Interface2 with the iprange/vlan connection for your management network..?

FMG Interface.png

 

Jakob Peterhänsel,
IT System Admin,
Arp-Hansen Hotrel Group A/S, Copenhagen, DK
Jakob Peterhänsel,IT System Admin,Arp-Hansen Hotrel Group A/S, Copenhagen, DK
Labels
Top Kudoed Authors