Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
jroy777
New Contributor II

Management and internal

I want to assign an IP on the internal (btw, what does that mean?) that is in the same subnet as the management IP.

Mgt 192.168.50.40 internal 192.168.50.41

It keeps telling me there is overlap. So I found this, and applied but it does not work. Even their example does not show IP's in the same subnet. 

 

https://docs.fortinet.com/document/fortiswitch/7.4.2/fortiswitchos-administration-guide/163703/overl...

Overlapping subnets

You can use the set allow-subnet-inteface command to allow two interfaces to include the same IP address in the same subnet. The command applies only between the mgmt interface and an internal interface.

NOTE: Different interfaces cannot have overlapping IP addresses or subnets. The same IP address can be used on different switches.

For example:

config system global

set admintimeout 480

set allow-subnet-overlap enable

end

config system interface

edit "mgmt"

set ip 172.16.86.112 255.255.255.0

set allowaccess ping https http ssh snmp telnet

set type physical

set alias "test"

set snmp-index 27

next

edit "internal"

set ip 10.0.1.112 255.255.255.0

set allowaccess ping

set type physical

set alias "testing-2"

set snmp-index 26

next

end

3 REPLIES 3
AEK
SuperUser
SuperUser

I'm not sure if it will help but try to do this:

config system interface
 edit mgmt
  set dedicated-to management
 end

After that it should work.

AEK
AEK
jroy777
New Contributor II

So really this command just allows for multiple switches to have the same IP, do I understand this correct?

AEK

Management interface can be dedicated to management or can also be used for traffic routing if needed. If dedicated for management I think you can do subnet overlap for this interface.

AEK
AEK
Labels
Top Kudoed Authors