Fortinet fortigate-50r Installationsanweisungen

You can also configure management access and add a ping server to the secondary 
IP address.

set system interface <intf_str> config secallowaccess ping 

https ssh snmp http telnet

set system interface <intf_str> config secgwdetect enable

Add a ping server to an interface if you want the FortiGate unit to confirm connectivity 
with the next hop router on the network connected to the interface. Adding a ping 
server is required for routing failover. See 

.

Go to System > Network > Interface.

Select Modify 

 for the interface to which to add a Ping server.

Set Ping Server to the IP address of the next hop router on the network connected to 
the interface.

Select Enable.
The FortiGate unit uses dead gateway detection to ping the Ping Server IP address to 
make sure that the FortiGate unit can connect to the this IP address. To configure 
dead gateway detection, see 

Select OK to save your changes.

Go to System > Network > Interface.

Select Modify 

 for the interface for which to configure management access.

Select the management Access methods for the interface.

Configuring management access for an interface connected to the Internet allows 

remote administration of the FortiGate unit from any location on the Internet. Allowing 

management access from the Internet could compromise the security of your 

FortiGate unit. You should avoid allowing management access for an interface 

connected to the Internet unless this is required for your configuration. To improve the 

security of a FortiGate unit that allows remote management from the Internet, add 

secure administrative user passwords, change these passwords regularly, and only 

enable secure management access using HTTPS or SSH.

Select OK to save your changes.

To allow HTTPS connections to the web-based manager through this interface.

If you want this interface to respond to pings. Use this setting to verify your 

installation and for testing.

To allow HTTP connections to the web-based manager through this interface. 

HTTP connections are not secure and can be intercepted by a third party.

To allow secure SSH connections to the CLI through this interface.

To allow a remote SNMP manager to request SNMP information by connecting to 

this interface. See 

To allow Telnet connections to the CLI through this interface. Telnet connections 

are not secure and can be intercepted by a third party.