Managing Individual Fortigate-7081F Fims And Fpms; Special Management Port Numbers - Fortinet FortiGate-7000F Series System Manual

Managing individual FortiGate-7081F FIMs and FPMs

You can manage individual FIMs and FPMs using special port numbers or the execute load-balance slot
manage command. You can also use the execute ha manage command to log in to the other FortiGate-7081F in an
HA configuration.

Special management port numbers

In some cases, you may want to connect to individual FIMs or FPMs to view status information or perform a maintenance
task such as installing firmware or performing a restart. You can connect to the GUI or CLI of individual FIMs or FPMs in
a FortiGate-7081F using the SLBC management interface IP address with a special port number.
You use the following command to configure the SLBC management interface:
config global
config load-balance setting
set slbc-mgmt-intf <interface>
end
Where <interface> becomes the SLBC management interface.
You can connect to the GUI of CLI of individual FIMs or FPMs using the SLBC management interface IP address
followed by a special port number. For example, if the SLBC management interface IP address is 192.168.1.99, to
connect to the GUI of the FPM in slot 3, browse to:
https://192.168.1.99:44303
The special port number (in this case 44303) is a combination of the service port (for HTTPS, the service port is 443) and
the slot number (in this example, 03).
You can view the special HTTPS management port number for and log in to the GUI of an FIM or FPM from the
Configuration Sync Monitor.
The following table lists the special port numbers to use to connect to each FortiGate-7081F slot using common
management protocols.
For example, to connect to the GUI of the FIM in slot 2 using HTTPS you would browse to https://192.168.1.99:44302.
FortiGate-7081F 7.0.5 System Guide
Fortinet Technologies Inc.
To enable using the special management port numbers to connect to individual FIMs and
FPMs, the SLBC management interface must be connected to a network, have a valid IP
address, and have management or administrative access enabled. To block access to the
special management port numbers, disconnect the mgmt interface from a network, configure
the SLBC management interface with an invalid IP address, or disable management or
administrative access for the SLBC management interface.
You can't change the special management port numbers. Changing configurable
management port numbers, for example the HTTPS management port (which you might
change to support SSL VPN), does not affect the special management port numbers.
37