FortiGate Administration Guide - FirewallShop.com

Using virtual domains
Configuring VDOMs and global settings
A regular administrator assigned to a VDOM can log in to the web-based manager
or the CLI only on interfaces that belong to that VDOM. The super admin can
connect to the web-based manager or CLI through any interface on the FortiGate
unit that permits management access. Only the super admin or a regular
administrator of the root domain can log in by connecting to the console interface.
To assign an administrator to a VDOM
1 Log in as the super admin.
Virtual domains must be enabled.
2 Go to System > Admin >Administrators.
3 Create and/or configure the new administrator account as required.
For detailed information about configuring an administrator account, see
“Configuring an administrator account” on page 166.
4 While configuring this admin account, select the VDOM this administrator
manages from the Virtual Domain list.
5 Select Apply.
Changing the Management VDOM
The management VDOM on your FortiGate unit is where some default types of traffic
originate. These types of traffic include:
• SNMP
• logging
• alert email
• FDN-based updates
• NTP-based time setting
Before you change the management VDOM, ensure virtual domains are enabled.
Only one VDOM can be the management VDOM at any given time. If you
accidently select more than one VDOM when setting the management VDOM, the
VDOM closest to the top of the list will become the management VDOM.
Note: You cannot change the management VDOM if any administrators are using RADIUS
authentication.
To change the management VDOM
1 Go to System > VDOM.
2 Select the VDOM that will be the new management VDOM.
3 Select Management to apply the changes.
Management traffic will now originate from the new management VDOM.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 77