Skip to main content
jjdope
Staff
Staff
January 22, 2025

Technical Tip: No option to configure IP address on the physical ports in FortiGate

  • January 22, 2025
  • 0 replies
  • 1830 views
Description This article describes a scenario with no CLI or GUI option to configure an IP address for the physical interface.
Scope

This behavior is seen on 00xx_Entry-level FortiGate devices—for Example 80F, 90G,91G, etc. As shown in the screenshot below, there is no option to set an IP address for the physical interface.

 

1.png

 

The physical interface port will not be shown in Interfaces -> Physical Interface on the GUI.

 

1.png

Solution

By default, there will be a hardware switch on the entry-level devices, and all the physical ports are a part of it.

 

The screenshots below were taken from a FortiGate-80F:

 

1.png

 

The physical ports should be removed from the hardware switch so that there will be an option to configure the IP address on it.

 

In the Console or CLI:

 

1.png

 

Once removed from the hardware switch, there will be an option to configure an IP address on the physical interface:

 

1.png

 

In GUI:

Navigate to Network -> Interfaces, select the Switch Interface, and remove the port from 'interface members' as the removed interface is not a part of the switch interface anymore.

 

The removed interface (internal3 in this case) will show up as below:

 1.png

 

Note:

WAN interfaces are not part of the switch by default, only the rest of the physical ports.

 

Related article:

Technical Tip: How to add or remove physical interface from Hardware/Software switch

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!