Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
royarpit
New Contributor

FortiManager GUI Not Accessible inspite of being able to ping it

Hi Experts,

 

I'm trying to setup a Virtual FortiManager on my EVE-NG platform. I have performed the following configurations on it through the CLI:

config system interface     edit "port2"         set ip 192.168.1.200 255.255.255.0         set allowaccess ping https ssh http     next end

My workstation IP is 192.168.1.14 and I'm am able to ping it successfully.

C:\Users\Arpit>ping 192.168.1.200 Pinging 192.168.1.200 with 32 bytes of data: Reply from 192.168.1.200: bytes=32 time=119ms TTL=64 Reply from 192.168.1.200: bytes=32 time=211ms TTL=64 Reply from 192.168.1.200: bytes=32 time=307ms TTL=64 Reply from 192.168.1.200: bytes=32 time=389ms TTL=64 Ping statistics for 192.168.1.200:     Packets: Sent = 4, Received = 4, Lost = 0 (0% loss), Approximate round trip times in milli-seconds:     Minimum = 119ms, Maximum = 389ms, Average = 256ms

However, whenever I try to access the FortiManager WebGUI on a browser (Chrome, FireFox, etc.) I receive the following error:

This site can’t be reached

192.168.1.200 refused to connect.

 

If someone is aware of this problem, kindly let me know how I could rectify this to access the FMG WebGUI.

Any help would be greatly appreciated :)

 

Regards,

Arpit Roy

12 REPLIES 12
wpaz
New Contributor

 I had the same problem, and resolve increase the memory to 8192 and 4 cpu.

Before that the fortimanager was try to create the LVM but does not work, and after increase the memory and cpu, works as expected.

 



Keilon
New Contributor

This work for me.

ede_pfau
SuperUser
SuperUser

In case you try to connect from a different subnet, you need to install a default route first:

conf sys route

edit 0

set dstint port1

set dest 0.0.0.0/0

set gateway x.x.x.x

next

end

(from memory, you'll find the exact syntax, it's similar to FortiOS).

Of course, this is not the root cause if your PC is on the same subnet. A valid ping test will show you that a route is not needed.

 

And, for "trusted hosts", these are not preset in a new VM.


Ede

"Kernel panic: Aiee, killing interrupt handler!"
Ede"Kernel panic: Aiee, killing interrupt handler!"
Labels
Top Kudoed Authors