Changing The Management Vdom - Fortinet Fortigate-5000 series Administration Manual

Using virtual domains
1
2
3
4
5

Changing the Management VDOM

1
2
3
FortiGate Version 3.0 MR4 Administration Guide
01-30004-0203-20070102
A regular administrator assigned to a VDOM can log in to the web-based manager
or the CLI only on interfaces that belong to that VDOM. The super admin can
connect to the web-based manager or CLI through any interface on the FortiGate
unit that permits management access. Only the super admin or a regular
administrator of the root domain can log in by connecting to the console interface.
To assign an administrator to a VDOM
Log in as the super admin.
Virtual domains must be enabled.
Go to System > Admin >Administrators.
Create and/or configure the new administrator account as required.
For detailed information about configuring an administrator account, see
"Configuring an administrator account" on page
While configuring this admin account, select the VDOM this administrator
manages from the Virtual Domain list.
Select Apply.
The management VDOM on your FortiGate unit is where some default types of traffic
originate. These types of traffic include:
• SNMP
• logging
• alert email
• FDN-based updates
• NTP-based time setting
Before you change the management VDOM, ensure virtual domains are enabled.
Only one VDOM can be the management VDOM at any given time. If you
accidently select more than one VDOM when setting the management VDOM, the
VDOM closest to the top of the list will become the management VDOM.
Note: You cannot change the management VDOM if any administrators are using RADIUS
authentication.
To change the management VDOM
Go to System > VDOM.
Select the VDOM that will be the new management VDOM.
Select Management to apply the changes.
Management traffic will now originate from the new management VDOM.
Configuring VDOMs and global settings
146.
67