Virtual Domain Properties; Exclusive Virtual Domain Properties - Fortinet FortiGate FortiGate-60M Administration Manual

Virtual domain properties

Virtual domain properties

Exclusive virtual domain properties

134
By default, each FortiGate unit runs a virtual domain named root. This virtual domain
includes all of the FortiGate physical interfaces, VLAN subinterfaces, zones, firewall
policies, routing settings, and VPN settings.
Once you add a virtual domain you can configure it by adding VLAN subinterfaces,
zones, firewall policies, routing settings, and VPN settings. You can also move
physical interfaces from the root virtual domain to other virtual domains and move
VLAN subinterfaces from one virtual domain to another.
This process works the same way in NAT/Route and in Transparent mode.
The following configuration settings are exclusively part of a virtual domain and are
not shared between virtual domains.
• System settings
• Physical interfaces (see
page 138)
• VLAN subinterfaces (see
page 139)
• Zones (see "To add zones to a virtual domain" on page
• Management IP (Transparent mode) (see
domain and add a management IP" on page
• Routing configuration
• Router configuration in NAT/Route mode (see
domain in NAT/Route mode" on page
• Routing table configuration in Transparent mode (see
table for a virtual domain in Transparent mode" on page
• Firewall settings
• Policies (see "To add firewall policies to a virtual domain" on page
• Addresses (see
• Service groups
• IP pools (are associated with an interface) (see
domain" on page
• Virtual IPs (are associated with an interface) (see
domain" on page
• VPN (see "To configure VPN for a virtual domain" on page
• IPSec
• PPTP
• L2TP
• Certificates
01-28007-0144-20041217
"To add physical interfaces to a virtual domain" on
"To add VLAN subinterfaces to a virtual domain" on
140)
"To add firewall addresses to a virtual domain" on page
141)
141)
System virtual domain
139)
"To select a management virtual
138)
"To configure routing for a virtual
"To configure the routing
140)
"To add IP pools to a virtual
"To add Virtual IPs to a virtual
142)
140)
141)
Fortinet Inc.