FortiGate Administration Guide - FirewallShop.com

System Network
Interface
IP/Netmask
Ping Server
Administrative
Access
HTTPS
Add
PING
HTTP
SSH
SNMP
TELNET
Enter the IP address/subnet mask in the IP/Netmask field.
The Secondary IP address must be on a different subnet than the
Primary IP address. Two interfaces cannot have IP addresses on
the same subnet.
This field is only available when Manual addressing mode is
selected.
To enable dead gateway detection, enter the IP address of the
next hop router on the network connected to the interface and
select Enable. See “Dead gateway detection” on page 100.
Multiple addresses can share the same ping server. This field is
optional.
Select the types of administrative access permitted on the
secondary IP. These can be different from the primary address.
Allow secure HTTPS connections to the web-based manager
through this secondary IP.
Secondary IP responds to pings. Use this setting to verify your
installation and for testing.
Allow HTTP connections to the web-based manager through this
secondary IP. HTTP connections are not secure and can be
intercepted by a third party.
Allow SSH connections to the CLI through this secondary IP.
Allow a remote SNMP manager to request SNMP information by
connecting to this secondary IP. See “Configuring SNMP” on
page 143.
Allow Telnet connections to the CLI through this secondary IP.
Telnet connections are not secure and can be intercepted by a
third party.
Select Add to add the configured secondary IP address to the
secondary IP table shown below.
Addresses in this table are not added to the interface until you
select OK or Apply at the bottom of this screen.
Secondary IP table A table that shows all the secondary IP addresses that have been
added to this interface.
These addresses are not permanently added to the interface until
you select OK or Apply at the bottom of the screen. Otherwise
some addresses may be removed from the table due to the above
restrictions.
# The number of the secondary IP address. There can be up to 32
additional IP addresses on an interface.
IP/Netmask The IP address and netmask for this secondary IP.
Ping Server The IP address of the ping server for this address. The ping
server can be shared by multiple addresses.
The ping server is optional.
Enable Indicates if the ping server option is selected.
Access
Delete Icon
The administrative access methods for this address. They can be
different from the primary IP address.
Select to remove this secondary IP entry.
Note: It is recommended that after adding a secondary IP, you return to the secondary IP
table and verify your new address is listed. If not, one of the restrictions prevented the
address from being added.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 97