Cybersecurity Forum

This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.

plokesh
Staff
Staff

Restoring config to an AWS FortiGate instance

Hello team,

       If you want to restore a config file from a existing FortiGate instance to a new one, there are some edits that needs to be done to make the restore work successfully.  They are as follows. 

a) Make sure that the port1 configuration is set to DHCP. (This might change in the future, but for the time being always use DHCP). Once the config file is restored, we can create a static route for port1 and set the interface to Static mode. The steps for doing that is in the following url(steps 1 and 2 in page 2-3).

https://www.fortinet.com/content/dam/fortinet/assets/solutions/aws/Fortinet_Multiple_Public_IPs_for_...

b) Since the config file has the mac address of the interfaces and they are unique,remove those entries. The below excerpt example shows how the original and edited entries in the config should look like. The italicized version is the original one and the italicized,bold version is the edited one. 

config system interface

    edit "port1"

        set vdom "root"

        set ip 10.0.0.254 255.255.255.0

        set allowaccess ping https ssh http fgfm

        set type physical

        set snmp-index 1

        set macaddr 06:09:3b:01:d1:81

    next

config system interface

    edit "port1"

        set vdom "root"

        set mode dhcp 

        set allowaccess ping https ssh http fgfm

        set type physical

        set snmp-index 1

    next

c) (optional) Change the password for admin login to make sure you can access the new instance. 

0 REPLIES 0