VDOM IP Assignment

[ataro]

I need to create a VDOM (named it VDOM-A) which will operate in Transparent mode with two interfaces. I want to set all firewall management using Root domain on MGMT with out of band. Is it mandatory to assign an IP address to VDOM-A at any level? In L2 mode, can it operate without assigning any IP to it?

[Toshi_Esumi · Accepted solution]

Apparently not possible. This is 7.4.8. You can try it yourself. It wouldn't hurt anything.

FortiGate-70F # c v

FortiGate-70F (vdom) # edit transparent
current vf=transparent:4

FortiGate-70F (transparent) # config sys settings

FortiGate-70F (settings) # set opmode transparent

FortiGate-70F (settings) # show
config system settings
    set opmode transparent
end

FortiGate-70F (settings) # end
node_check_object fail! for manageip
Attribute 'manageip' MUST be set.
Command fail. Return code -651

Toshi

[ataro]

I believe this IP an be any IP, even dummy unused IP is OK right?

[Toshi_Esumi]

If you don't use it you just need to avoid any conflict with others, I believe.

Toshi