Creating A New Vdom - Fortinet FortiGate Series Administration Manual

Configuring VDOMs and global settings

Creating a new VDOM

166
Note: Your FortiGate unit has limited resources that are divided amongst all configured
VDOMs. These resources include system memory, and CPU. When running 250 or more
VDOMs, you cannot run Unified Threat Management (UTM) features such as proxies, web
filtering, or antivirus—your FortiGate unit can only provide basic firewall functionality.
Tip: If you do not have a System > Maintenance > License tab, your FortiGate model does
not support more than 10 VDOMs.
To obtain a VDOM license key
1 Log in to your FortiGate unit using the admin account.
Other accounts such as other super_admin profile accounts may also have sufficient
privileges to install VDOM licenses.
2 Go to System > Status.
3 Record your FortiGate unit serial number as shown in
page 109.
4 Under License Information > Virtual Domains, select Purchase More.
5 You will be taken to the Fortinet customer support web site where you can log in and
purchase a license key for 25, 50, 100, 250, or 500 VDOMs.
6 When you receive your license key, go to System > Maintenance > License.
7 In the License Key field, enter the 32-character license key you received from Fortinet
customer support.
8 Select Apply.
To verify the new VDOM license, go to System > Status under Global Configuration. In the
License Information area Virtual Domains, VDOMs Allowed shows the maximum number
of VDOMs allowed.
Note: VDOMs created on a registered FortiGate unit are recognized as real devices by any
connected FortiAnalyzer unit. The FortiAnalyzer unit includes VDOMs in its total number of
registered devices. For example, if three FortiGate units are registered on the FortiAnalyzer
unit and they contain a total of four VDOMs, the total number of registered FortiGate units
on the FortiAnalyzer unit is seven. For more information, see the
Administration Guide.
By default, every FortiGate unit has a root VDOM that is visible when VDOMs are
enabled. To use additional VDOMs, you must first create them.
When using multiple VDOMs, it can be useful to assign fewer resources to some VDOMs
and more resources to others. This VDOM resource management will result in better
FortiGate unit performance. For more information, see
individual VDOMs" on page
VDOM names have the following restrictions:
• Only letters, numbers, "-", and "_" are allowed.
• A name can have no more than 11 characters.
• A name cannot contain spaces.
• VDOMs cannot have the same names as interfaces, zones, switch interfaces, or other
VDOMs
174.
FortiGate Version 4.0 MR1 Administration Guide
Using virtual domains
"System Information" on
FortiAnalyzer
"Configuring resource usage for
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback