beautypg.com

Adding a secondary ip address to an interface, Adding a ping server to an interface – Fortinet FortiGate 4000 User Manual

Page 146

background image

146

Fortinet Inc.

Configuring interfaces

Network configuration

7

Select Apply.
The FortiGate unit attempts to contact the PPPoE server from the interface to set the
IP address, netmask, default gateway IP address, and DNS server IP addresses.

8

Select Status: to refresh the addressing mode status message. Possible messages:

9

Select OK.

Adding a secondary IP address to an interface

You can use the CLI to add a secondary IP address to any FortiGate interface. The
secondary IP address cannot be the same as the primary IP address but it can be on
the same subnet.

To add a secondary IP address from the CLI enter the command:

set system interface config secip

You can also configure management access and add a ping server to the secondary
IP address.

set system interface config secallowaccess ping
https ssh snmp http telnet
set system interface config secgwdetect enable

Adding a ping server to an interface

Add a ping server to an interface if you want the FortiGate unit to confirm connectivity
with the next hop router on the network connected to the interface. Adding a ping
server is required for routing failover. See

“Adding destination-based routes to the

routing table” on page 159

.

To add a ping server to an interface

1

Go to System > Network > Interface.

2

Choose an interface and select Modify

.

3

Set Ping Server to the IP address of the next hop router on the network connected to
the interface.

4

Select the Enable check box.
The FortiGate unit uses dead gateway detection to ping the Ping Server IP address to
make sure that the FortiGate unit can connect to this IP address. To configure dead
gateway detection, see

“Modifying the Dead Gateway Detection settings” on

page 177

.

5

Select OK to save the changes.

initializing

No activity

connecting

The FortiGate unit is attempting to connect to the DHCP server.

connected

The FortiGate unit retrieves an IP address, netmask, and other settings from

the PPPoE server.

failed

The FortiGate unit was unable to retrieve an IP address and other

information from the PPPoE server.