Introduction

The article bellow cover the Basic Setup Commands of Fortigate-VM (build 5.x) fo
r lab purpose.
The information in this article was tested by using FGT_VM64-v5-build0642-FORTIN
ET.
Note: In production environment its highly recommends to use a dedicated port fo
r management purpose.
Fortigate-VM in a NAT Mode Basic Setup Commands
a. Logging locally to the Fortigate-VM console
image
User: admin
Password: n/a
b. Set a Static Route to Port1 (management interface) & Enable Management Servic
es on port1
config system interface
edit port1
set ip 192.168.1.200/255.255.255.0
set allowaccess http https ssh ping
end
show system interface
c. Set Default Gateway & Egress Port
config router static
edit 1
set gateway 192.168.1.254
set device port1
end
show router static
d. Set DNS Servers
config system dns
set primary 8.8.8.8
set secondary 8.8.4.4
end
show system dns
e. Update License key & Product Signatures

exexcute update-now
f. Settings Saving
execute cfg save
Fortigate-VM in a Transparent Mode Basic Setup Commands
Fortigate-VM in a Transparent Mode is a special deployment and the Basic Setup C
ommands slights different from the above commands.
Please remember that in Transparent Mode all the ports are in L2 layer mode, whi
le a virtual IP is set to be use for a management purpose.
a. Set a static IP (Virtual Management Interface) & Static Route
config system settings
set manageip 192.168.1.200/255.255.255.0
set gateway 192.168.1.254
end
show system settings
show route static
b. Enable Management Services on port1
config system interface
edit port1
set allowaccess http https ssh ping
end
show system interface
c. Set DNS Servers
config system dns
set primary 8.8.8.8
set secondary 8.8.4.4
end
show system dns
d. Update License key & Product Signatures
exexcute update-now
e. Settings Saving
execute cfg save
NAT Mode to Transparent Mode
config system settings

set opmode transparent

set manageip 192.168.1.200/255.255.255.0
end
config router static
edit 1
set gateway 192.168.1.254
next
end
config system interface
edit port 1
set allowaccess http https ssh ping
end
execute reboot
Troubleshooting
execute ping 8.8.8.8