Transceiver/Interface Module | Possible Choices | Required Settings |
SFP (1 Gbps) | Auto, 1000Mbps Full Duplex | 1000Mbps Full Duplex |
SFP+ (10 Gbps) | Auto, 1000Mbps Full Duplex | Auto |
LC 850nm optical (10 Gbps)* | Auto, 1000Mbps Full Duplex | Auto |
*Available on FortiDDOS 2000B only. |
The Status indicators on the Interface Configuration page display the connectivity status. A green indicator means that the link is connected and negotiation was successful. A red indicator means that the link is not connected or is down. |
Settings | Guidelines |
Speed | Select one of the following speed/duplex settings: • Auto—Speed and duplex are negotiated automatically. Recommended. • 10half—10 Mbps, half duplex. • 10full—10 Mbps, full duplex. • 100half—100 Mbps, half duplex. • 100full—100 Mbps, full duplex. • 1000half—1000 Mbps, half duplex. • 1000full—1000 Mbps, full duplex. |
IPv4/Netmask | Management interfaces only. Specify the IP address and CIDR-formatted subnet mask, separated by a forward slash ( / ), such as 192.0.2.5/24. Dotted quad formatted subnet masks are not accepted. |
IPv6/Netmask | Management interfaces only. Specify the IP address and CIDR-formatted subnet mask, separated by a forward slash ( / ), such as 2001:0db8:85a3:::8a2e:0370:7334/64. Dotted quad formatted subnet masks are not accepted. |
Administrative Access | Management interfaces only. Allow inbound service traffic. Select from the following options: • HTTP—Enables connections to the web UI. We recommend this option only for network interfaces connected to a trusted private network, or directly to your management computer. • HTTPS—Enables secure connections to the web UI. We recommend this option instead of HTTP. • Ping—Enables ping and traceroute to be received on this network interface. When it receives an ECHO_REQUEST (“ping”), the FortiDDOS system replies with ICMP type 0 (ECHO_RESPONSE or “pong”). • SNMP—Enables SNMP queries to this network interface. • SSH—Enables SSH connections to the CLI. We recommend this option instead of Telnet. • Telnet—Enables Telnet connections to the CLI. We recommend this option only for network interfaces connected to a trusted private network, or directly to your management computer. • SQL—Enables SQL queries. Note: We recommend that you enable administrative access only on network interfaces connected to trusted private networks or directly to your management computer. If possible, enable only secure administrative access protocols such as HTTPS or SSH. |
CLI commands: config system interface edit <interface> set speed {auto|10half|10full|100half|100full|1000half|1000full} set status {up|down} set ip <address_ipv4> <netmask_ipv4mask> set allowaccess {http https ping snmp ssh telnet sql} end |