config system central-management
	set type fortimanager
	set fmg ${CM_IP_ADDRESS}
	set mode backup
config server-list
	edit "1"
		set server-type update rating
		set server-address ${CM_IP_ADDRESS}
	next
	end
	set include-default-servers disable
	end
config system global
	set hostname ${HOSTNAME}
	end
config system interface
	edit "mgmt"
		set vdom "root"
		set mode static
		set ip ${MGMT_IP_ADDRESS} ${MGMT_IP_MASK}
		set allowaccess ping https http ssh telnet fgfm
		set type physical
		set snmp-index 1
	next
	edit "port1"
		set vdom "root"
		set mode dhcp
		set allowaccess ping
		set type physical
		set snmp-index 2
	next
	edit "port2"
		set vdom "root"
		set mode static
		set allowaccess ping
		set type physical
		set snmp-index 3
	next
	end
config router static
	edit 1
		set dst 0.0.0.0 0.0.0.0
		set device mgmt
		set gateway ${GATEWAY}
		set comment "Admin route1"
	end
configure routing static
	edit 1
		set gateway ${GATEWAY}
		set distance 30
		set device mgmt
		set dst 0.0.0.0
	end
config firewall service group
	edit DEFAULT_BASIC_FW
	set member HTTP HTTPS DNS PING
	next
	end
config firewall policy
	edit 1
		set name DEF_POL_BASIC_FW
		set srcaddr all
		set dstaddr all
		set action accept
		set schedule always
		set service DEFAULT_BASIC_FW
		set utm-status disable
		set logtraffic all
	end
end

