Technical Tip: How to configure a VLAN to only one FortiGate using a shared policy package

Creating a VLAN interface from the FortiManager is straightforward, using the following steps:

1. Navigate to the Policy & Objects -> Normalized Interface -> Create New. Then, proceed to fill in the interface name and select OK to save the configuration.
2. Navigate to the Device Manager -> Select the device -> Network -> Interface -> Create New -> VLAN. Configured as per requirement and scroll towards the bottom and ensure 'Miscellaneous' is configured with 'Map to Normalized Interface' that was created in the previous steps.
3. Go to the Policy & Objects -> Policy Package -> Select the package -> Identify the policy and add the newly created interface.

Note that if the policy package in question is a shared policy package and it is assigned to multiple FortiGates, step 2, as laid out previously, needs to be done on all the FortiGates to avoid installation failure.

However, if the requirement is only for a specific FortiGate, the following steps can be taken:

1. Identify the policy that needs an extra VLAN interface for the specific FortiGate. Select the Policy -> 'Right-click' -> Clone.
2. Remove the original interfaces and add the extra VLAN interface, and rename the policy to a proper name. Select OK to save the configuration.
3. Scroll the table to the right until the 'Install On' column is on the screen. Select the edit icon and select the required devices.

This way, even though all FortiGates are using the same shared policy package, only the selected FortiGate will receive the extra policy with the new VLAN interface.