Set up the FortiAnalyzer-BigData network

To set up the network for FortiAnalyzer-BigData, connect either a 10GE link with SFP or 40GE link with QSFP, from Switch Module #2 to your public access switch. Next, connect to the FortiAnalyzer-BigData Main CLI to set up the external IP address, via the CMM web management utility. See,Connect to the FortiAnalyzer-BigData CLI. This setup requires two IPs from the same subnet for logging (Main Host) and management (Security Event Manager) access.

1. Change the Security Event Manager IP Address/Netmask and Gateway fields to your internal network.

   This is the address of the FortiAnalyzer-BigData Security Event Manager which is responsible for serving the web GUI and performs various data processing and management workload.

   config system global
       set bd-management-gateway 10.106.2.254
       set bd-management-ip 10.106.2.220 255.255.255.0
   end

2. Change the Main Host IP Address/Netmask and Gateway fields to your internal network.

   This is the address of the FortiAnalyzer-BigData Main host, which is responsible for collecting the logs displayed in the GUI for FortiView, LogView, Reports, and so on.

   config system interface
       edit "port2"
           set ip 10.106.2.221 255.255.255.0
       next
   end
   config system route
       edit 1
           set device "port2"
           set gateway 10.106.2.254
       next
   end