Device Manager – FortiManager 5.2

Creating and editing virtual domains
Creating and editing virtual domains in the FortiManager system is very similar to creating and editing VDOMs using the FortiGate Web-based Manager.
You need to enable virtual domains before you can create one.
To enable virtual domains:
1. In the Device Manager tab, select the unit you want to configure.
2. In the device dashboard toolbar, go to Dashboard > System Information .
3. Select the Enable link in the Virtual Domain field.
To create a virtual domain:
1. In the Device Manager ta b , select the unit you want to configure.
2. In the content pane tab bar, go to the Virtual Domain tab, then select Create New to create a new VDOM.

3. After the first VDOM is created you can create additional VDOMs by right-clicking on the existing VDOM and selecting Add VDOM from the right-click menu.
Create a new NAT VDOM

Create a new transparent VDOM

4. Type the name, operation mode and an optional description for the new VDOM. If you selected Transparent mode, you also need to type the management IP address and netmask, as well as the gateway.
5. Select Submit to create the new VDOM.
Configuring inter-VDOM routing
By default, for two virtual domains to communicate it must be through externally connected physical interfaces. InterVDOM routing creates a link with two ends that act as virtual interfaces, internally connecting the two virtual domains.
Before configuring inter-VDOM routing:
You must have at least two virtual domains configured. The virtual domains must all be in NAT mode. Each virtual domain to be linked must have at least one interface or subinterface assigned to it.

create a VDOM link:
In the Device Tree , select a virtual domain.
2. Select the Interface device tab.
3. Select Create New > VDOM Link from the toolbar. The New VDOM Link window opens.
New VDOM link

4. Enter the following information:
Name Name of the VDOM link.
Interface #x The interface number, either 1 or 0 .
VDOM Select the VDOM
IP/Netmask Type the IP address and netmask for the VDOM.
Administrative Access Select the allowed administrative service protocols from: HTTPS, HTTP, PING, SSH, Telnet, SNMP, and Web Service.
Description Optionally, type a description for the link.
5. Select OK to save your settings.
Configuring VDOM resource limits
A VDOM’s resource limit defines how much resources a VDOM can consume. You can set a VDOM’s maximum and guaranteed limits for each resource. You can also view the current usage of the resources by the VDOM.
A VDOM’s maximum limit for a resource cannot be greater than the global maximum limit set for this resource. This value is not guaranteed if you have more than one VDOM with each one having a maximum limit value and all are running at the same time.
A VDOM’s guaranteed resource limit is the actual amount of resource a VDOM can use regardless of the number of VDOMs running at the same time. Although each VDOM can have its own guaranteed limit, the sum of guaranteed resource limits for all VDOMs must be less than or equal to the global maximum resource limit.
For more information, see Configuring VDOM global resources .
To configure a VDOM’s resource limits:
1. In the Device Manager tab, select the unit you want to configure.
2. Select the Virtual Domain tab in the content pane, then sele ct theResourceicon for one of the VDOMs in the list. The Resource Usage page opens.
Resource usage page

3. For each resource: type the maximum value allowed for this resource. If you type a wrong value, a warning appears with the correct value range. type the value allocated for this resource. This value must be lower than or equal to the maximum value.
4. Select OK .
Configuring VDOM global resources
You can set a maximum limit for each resource that each VDOM in a device can consume. Each VDOM’s maximum limit cannot exceed the global maximum limit set for the same resource. This is a good way to allocate network resources.
configure VDOM global resources:
In the Device Manager tab, select the unit you want to configure.
2. In the content pane, select the Global Resources tab.
Global resources

One thought on “Device Manager – FortiManager 5.2

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.