Skip to main content
live89
Explorer III
Aug 22, 2025 8:00 AM UTC
Solved

CheckPoint to FortiGate conversion

We are converting checkpoint configurations to fortigate (finally getting rid of it)

But I have seen the interface setting and here is something I am not used to it

In Checkpoint the LAG interface itself (the physical) has a network without VLAN 

the Forticonverter converter exactly the same settings. see screenshots bellow:

checkpoint.PNG

forticonverter.PNG

I am used to put all IP addresses and betworks to logical interfaces with VLANID

So my question is, will this work normally in fortigate? with VLAN ID 1 ? untagged ? can this interface (the physical) be assigned to policies later ?

 

Thanks 

funkylicious
SuperUser
Aug 22, 2025 8:20 AM UTC

yes, it should work normally and you can use it later in firewall rules.

as for the VLAN ID, this can be verified/viewed and the switch/PO interface on what native vlan is set but it should work as intended.

"jack of all trades, master of none"

3 replies

funkylicious
SuperUser
SuperUser
Aug 22, 2025 8:20 AM UTC

yes, it should work normally and you can use it later in firewall rules.

as for the VLAN ID, this can be verified/viewed and the switch/PO interface on what native vlan is set but it should work as intended.

"jack of all trades, master of none"
live89
live89Author
Explorer III
Aug 22, 2025 10:32 AM UTC

Thank you, appreciated!

For the SW (Aruba) it is native vlan 1

So it is the same in the Physical link aggregation in fortigate?

 

aruba.PNG

funkylicious
SuperUser
SuperUser
Aug 22, 2025 12:19 PM UTC

it should be ok.

 

you would need to match the LACP params on the FGT to the ones on the SW as for mode active and speed/rate fast .

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Initial-troubleshooting-steps-for-LACP-Link/ta-p/198339 

"jack of all trades, master of none"
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT