configure secondary IPs to overlap the primary ip

Fortigate-800 # config sys global

 

(global)#

 set       modify value

 unset     set to default value

 get       get configuration

 show      retrieve value

 abort     end and discard last config

 end       end and save last config

 

(global)# set

 admintimeout                       Set the idle time-out for firewall administration

 allow-interface-subnet-overlap     allow one interface subnet overlap with other interfaces

 asymroute                          asymmetric route

 authtimeout                        Set the firewall user authentication time-out

 conn_tracking                      control firewall to drop SYN after connected

 daily_restart                      enable/disable firewall daily reboot

 dst                                enable/disable daylight saving time

 failtime                           Fail-time for ping server lost

 hostname                           firewall hostname

 ie6workaround                      enable/disable workaround navigation bar freeze on IE6

 interval                           Dead gateway detection interval

 ip_signature                       activate ip signature

 ips-open                           control firewall to drop SYN after connected

 ips-size                           ips buffer size

 language                           GUI display language

 lcdpin                             LCD Panel PIN Number

 lcdprotection                      enable/disable LCD Panel PIN protection

 local_anomaly                      ips anomaly protection for local access

 loglocaldeny                       log local access attempts on non-management ports

 management-vdom                    management virtual domain name

 mc-ttl_notchange                   multicast ttl not change

 multicast-forward                  multicast forwarding

 ntpserver                          IP address/hostname of NTP Server

 ntpsync                            enable/disable synchronization with NTP Server

 opmode                             firewall operation mode

 phase1-rekey                       enable/disable phase1 rekey

 radius_port                        RADIUS service port number

 refresh                            Statistics refresh interval in Web Interface

 reset_sessionless_tcp              reset sessionless tcp

 syncinterval                       synchronization time interval

 tcp_option                         tcp option

*timezone                           time zone

 

(global)# se allow-interface-subnet-overlap en

 

(global)# end

 

Fortigate-800 # config sys int

 

(interface)# edit internal

 

(internal)# config

 secondaryip         Second IP address of interface

 ip6-prefix-list     advertised prefix list

 

(internal)# config secondaryip

 <Enter>

 

(internal)# config secondaryip

 

(secondaryip)# edit 1

new entry '1' added

 

(1)# set ip 10.99.1.11 255.255.255.0

 

(1)# end