Managing Individual Fortigate-6000 Management Boards And Fpcs; Special Management Port Numbers - Fortinet FortiGate-6000F Series System Manual

Managing individual FortiGate-6000 management boards
and FPCs
You can manage individual FPCs using special management port numbers, FPC consoles, or the
balance slot manage command. You can also use the execute ha manage command to log in to the other
FortiGate-6000 in an HA configuration.

Special management port numbers

You may want to connect to individual FPCs to view status information or perform a maintenance task, such as
installing firmware or performing a restart. You can connect to the GUI or CLI of individual FPCs (or the management
board) using the MGMT1 interface IP address with a special port number.
For example, if the MGMT1 interface IP address is 192.168.1.99 you can connect to the GUI of the first FPC (the FPC
in slot 1) by browsing to :
https://192.168.1.99:44301
The special port number (in this case, 44301) is a combination of the service port (for HTTPS, the service port is 443)
and the FPC slot number (in this example, 01).
You can view the special HTTPS management port number for and log in to the GUI of an FPC from the Configuration
Sync Monitor.
The following table lists the special ports you can use to connect to individual FPCs or the management board using
common management protocols. The FortiGate-6300F and 6301F have 7 slots (0 to 6) and the FortiGate-6500F and
6501F have 11 slots (0 to 10). Slot 0 is the management board (MBD) slot. Slots 1 to 10 are FPC slots.
FortiGate-6000F 6.4.2 System Guide
Fortinet Technologies Inc.
You can use the config load-balance setting slbc-mgmt-intf command to
change the management interface used. The default is
mgmt2 , or mgmt3 .
To enable using the special management port numbers to connect to individual FPCs, set
slbc-mgmt-intf to an interface that is connected to a network, has a valid IP address, and
has management or administrative access enabled. To block access to the special
management port numbers you can set
connected to a network, does not have a valid IP address, or has management or
administrative access disabled.
You can't change the special management port numbers. Changing configurable
management port numbers, for example the HTTPS management port number (which you
might change to support SSL VPN), does not affect the special management port numbers.
mgmt1 and it can be changed to
slbc-mgmt-intf to an interface that is not
execute load-
34