configure secondary IPs to overlap the primary ip

Fortigate-800 # config sys global
 
(global)#
 set       modify value
 unset     set to default value
 get       get configuration
 show      retrieve value
 abort     end and discard last config
 end       end and save last config
 
(global)# set
 admintimeout                       Set the idle time-out for firewall administration
 allow-interface-subnet-overlap     allow one interface subnet overlap with other interfaces
 asymroute                          asymmetric route
 authtimeout                        Set the firewall user authentication time-out
 conn_tracking                      control firewall to drop SYN after connected
 daily_restart                      enable/disable firewall daily reboot
 dst                                enable/disable daylight saving time
 failtime                           Fail-time for ping server lost
 hostname                           firewall hostname
 ie6workaround                      enable/disable workaround navigation bar freeze on IE6
 interval                           Dead gateway detection interval
 ip_signature                       activate ip signature
 ips-open                           control firewall to drop SYN after connected
 ips-size                           ips buffer size
 language                           GUI display language
 lcdpin                             LCD Panel PIN Number
 lcdprotection                      enable/disable LCD Panel PIN protection
 local_anomaly                      ips anomaly protection for local access
 loglocaldeny                       log local access attempts on non-management ports
 management-vdom                    management virtual domain name
 mc-ttl_notchange                   multicast ttl not change
 multicast-forward                  multicast forwarding
 ntpserver                          IP address/hostname of NTP Server
 ntpsync                            enable/disable synchronization with NTP Server
 opmode                             firewall operation mode
 phase1-rekey                       enable/disable phase1 rekey
 radius_port                        RADIUS service port number
 refresh                            Statistics refresh interval in Web Interface
 reset_sessionless_tcp              reset sessionless tcp
 syncinterval                       synchronization time interval
 tcp_option                         tcp option
*timezone                           time zone
 
(global)# se allow-interface-subnet-overlap en
 
(global)# end
 
Fortigate-800 # config sys int
 
(interface)# edit internal
 
(internal)# config
 secondaryip         Second IP address of interface
 ip6-prefix-list     advertised prefix list
 
(internal)# config secondaryip
 
 
(internal)# config secondaryip
 
(secondaryip)# edit 1
new entry '1' added
 
(1)# set ip 10.99.1.11 255.255.255.0
 
(1)# end
 

你可能感兴趣的:(fortinet)