Technical Tip: Adding FortiLink interface via CLI

Description

This article describes how to monitor FortiSwitches connected to FortiGate via the FortiLink interface by adding the FortiLink interface through the CLI.

Scope

FortiGate, FortiSwitch, FortiLink.

Solution

The FortiLink interface needs to be added to the policy.

It is not possible to link a FortiLink interface to a policy in the GUI as it is not visible under Policy -> Source/Destination.

Consequently, it must be done through the CLI:

config firewall policy
    edit 15
        set srcintf (fortilink interface)                  <- Name the FortiLink interface here.
        set dstintf (where snmp server is)
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "SNMP"
        set nat enable
    end