Chapter 19 Virtual Domains : Virtual Domains : Enabling and accessing Virtual Domains : Logging in to VDOMs
  
Logging in to VDOMs
Only super_admin administrator accounts can access all global settings on the FortiGate unit and all of the VDOMs as well. Other administrator accounts can access and configure only their single VDOM and they must connect to an interface that is part of that VDOM. For example, administratorB is the admin for vdomB. If he tries to log into vdomA, or an interface that is part of vdomA he will not be able to log on. For more information on administrators in VDOMs, see “Administrators in Virtual Domains”.
Management services communicate using the management VDOM, which is the root VDOM by default. For more information, see “Changing the management virtual domain”.
 
Management traffic requires an interface that has access to the Internet. If there is no interface assigned to the VDOM containing the management traffic, services including updates will not function. For more information, see “Changing the management virtual domain”.
To access a VDOM with a super_admin account - web-based manager
1. Log in with a super_admin account.
2. In the Virtual Domains menu on the left-hand side, select the VDOM to configure.
The menu will expand to show the various pages and settings for that VDOM.
3. When you have finished configuring the VDOM, you can
open the Global menu to return to global configuration
log out.
To access a VDOM with a super_admin account - CLI
With the super_admin, logging into the CLI involves also logging into the specific VDOM. If you need a reminder, use edit ? to see a list of existing VDOMs before you editing a VDOM.
 
If you misspell a VDOM you are trying to switch to, you will create a new VDOM by that name. Any changes you make will be part of the new VDOM, and not the intended VDOM. If you are having problems where your changes aren’t visible, back up to the top level and use edit ? to see a list of VDOMs to ensure this has not happened. If it has happened, see “Deleting a VDOM”.
config vdom
edit ?
edit <chosen_vdom>
..
<enter vdom related commands>
..
end
exit
To access a VDOM with a non super_admin account - web-based manager
1. Connect to the FortiGate unit using an interface that belongs to the VDOM to be configured.
2. Log in using an administrator account that has access to the VDOM.
The main web-based manager page opens. The interface is largely the same as if the device has VDOMs disabled. From here you can access VDOM-specific settings.
To access a VDOM with a non-super_admin account - CLI
A non-super_admin account has access to only one VDOM and must log in through an interface that belongs to the same VDOM, but the process is the same as logging into a non-VDOM unit.
Login: regular_admin
Password: <password>
..
<enter vdom related commands>
..
exit