Configuring interfaces

Network configuration

 

 

Changing an interface static IP address

Use the following procedure to change the static IP address of any FortiGate interface:

1Go to System > Network > Interface.

2Select Modify for the interface to change.

3Change the IP address and Netmask as required.

The IP address of the interface must be on the same subnet as the network the interface is connecting to.

Two interfaces cannot have the same IP address and cannot have IP addresses on the same subnet.

4Select OK to save your changes.

If you changed the IP address of the interface that you are connecting to manage the FortiGate unit, you must reconnect to the web-based manager using the new interface IP address.

Adding a secondary IP address to an interface

You can use the CLI to add a secondary IP address to any FortiGate interface. The secondary IP address cannot be the same as the primary IP address but it can be on the same subnet.

To add a secondary IP address from the CLI enter the command:

set system interface <intf_str> config secip <second_ip> <netmask_ip>

You can also configure management access and add a ping server to the secondary

IP address.

set system interface <intf_str> config secallowaccess ping https ssh snmp http telnet

set system interface <intf_str> config secgwdetect enable

Adding a ping server to an interface

Add a ping server to an interface if you want the FortiGate unit to confirm connectivity with the next hop router on the network connected to the interface. Adding a ping server is required for routing failover. See “Adding destination-based routes to the routing table” on page 143.

1Go to System > Network > Interface.

2Select Modify for the interface to which to add a Ping server.

3Set Ping Server to the IP address of the next hop router on the network connected to the interface.

4Select Enable.

The FortiGate unit uses dead gateway detection to ping the Ping Server IP address to make sure that the FortiGate unit can connect to the this IP address. To configure dead gateway detection, see “To modify the Dead Gateway Detection settings” on page 159.

5Select OK to save your changes.

136

Fortinet Inc.

Page 136
Image 136
Fortinet 400 manual Changing an interface static IP address, Adding a secondary IP address to an interface, 136