Skip to main content
krissilon
krissilon
New Member
March 1, 2017
Question

Configure WAN2 and DMZ as software switch port

  • March 1, 2017
  • 1 reply
  • 9841 views

Hi,

 

I have a fortiwifi 60D running 5.4.1 and I am missing two ports to complete my setup.  As I have only one isp provider and no web server, I would like to configure WAN2 and DMZ ports as normal switch ports like the others (in software switch).  Can anyone point me in the right direction how to do this the most easy way as I am a fortigate newbie ?

 

Tks,

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    March 1, 2017

    I regularly don't use GUI but since you said you were new to FG that's probably you want to use. First, 5.4 introduced interface role, like WAN for WAN1 and 2, and DMZ for DMZ only for GUI sake, so you need to change them to "LAN" to be able to bind them to internal interface. You probably need to remove pre-assigned IP from DMZ port too but need to put 0.0.0.0/0.0.0.0 in (that's why I don't like GUI).

    Second, you have to remove all config attached to internal interface, which is a hard-switch interface, including IP and DHCP server. Also even with the default config, there is one policy exist using the internal interface. You need to remove that too.

    Then you should be able to create a new softswitch interface and select those three interfaces.

    krissilon
    krissilonAuthor
    New Member
    March 7, 2017

    Thank you Toshi for helping out a newbie.  Will hopefully have some time this weekend to give it a try - I will keep you posted on the outcome.

    Terms & ConditionsAccessibility statement