Block Intra-VLAN traffic
- March 26, 2021
- 1 reply
- 7386 views
Hi,
I need to prevent users from seeing each other in the same vlan. ( Block Intra-VLAN traffic )
I have read the doc on 6.4.2 but when i try to apply the command : here the message.

Enabling and disabling switch-controller access VLANs through the FortiGate unit
Access VLANs are VLANs that aggregate client traffic solely to the FortiGate unit. This prevents direct client-to-client traffic visibility at the layer-2 VLAN layer. Clients can only communicate with the FortiGate unit. After the client traffic reaches the FortiGate, the FortiGate unit can then determine whether to allow various levels of access to the client by shifting the client's network VLAN as appropriate.
NOTE: IPv6 is not supported between clients within a switch-controller access VLAN.
Use enable to allow traffic only to and from the FortiGate and to block FortiSwitch port-to-port traffic on the specified VLAN. Use disable to allow normal traffic on the specified VLAN.
config system interfaceedit <VLAN name>set switch-controller-access-vlan {enable | disable}nextend
Thanks in advance for your help.
