config system interface
Use this command to configure allowed and denied administrative access protocols, up or down administrative status for the network interfaces of FortiNDR.
Syntax
config system interface
edit <physical_interface_str>
set allowaccess {ping https ssh telnet}
set discover {enable | disable}
set ip {ipv4mask}
set mode {static | dhcp}
set mtu <mtu_int>
set sniffer {off | ndrd | snifferd}
set speed {auto | 10full | 10half | 100full | 100half | 1000full}
set status {down | up}
end
|
Variable |
Description |
Default |
||||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
<physical_interface_str> |
Name of the physical network interface, such as port1. |
|
||||||||
|
allowaccess {ping | https | ssh | telnet} |
Add one or more protocols to the list of protocols that allow administrative access to FortiNDR through this network interface:
HTTP and Telnet connections are not secure and can be intercepted by a third party. To reduce risk, enable this option only on network interfaces connected directly to your management computer. |
Varies by network interface. |
||||||||
|
discover {enable | disable} |
Allow discovery of the interface on this port. |
|
||||||||
|
ip <ipv4mask> |
IP address and netmask of the network interface. |
|
||||||||
|
set mtu <mtu_int> |
Sets the maximum packet or Ethernet frame size in bytes. The Maximum Transmission Unit (MTU) determines the largest size of packets or Ethernet frames that can be transmitted without fragmentation. Setting the correct MTU is crucial for optimal network performance and reliability. If the MTU is not aligned with the requirements of your network, packets may require fragmentation or defragmentation at network nodes, which can lead to performance issues and packet drops. The valid range is from 68 to 9702 bytes. |
|
||||||||
|
mode {static | dhcp} |
Interface mode. |
|
||||||||
|
sniffer {off | ndrd | snifferd} |
Sniffer mode of the network interface. This option is only available on sniffer network interfaces. |
|
||||||||
|
speed {auto | 10full | 10half | 100full | 100half | 1000full} |
Speed of the network interface. Some network interfaces might not support all speeds. |
|
||||||||
|
status {down | up} |
up enables the network interface to send and receive traffic. down disables the network interface.
|
|