Enabling Fortigate Zone interface policy

3 replies
438 views

Hello everyone,

I have a Fortigate 60F device running Fortios 7.6.4. I want to create a ZONE, but because I have rules on my existing VLANs,
I cannot include them in the ZONE interface member section. Deleting these rules would take a long time. Despite this, can I include my interfaces in the zone?

Thank you for your help.

adambomb1219Answer

SuperUser

Not without deleting them. Look at using a CLI script or the CLI for this.

Or export/import of the configuration by manually changing the text in the config.

adambomb1219Answer

SuperUser

Not without deleting them. Look at using a CLI script or the CLI for this.

Or export/import of the configuration by manually changing the text in the config.

funkylicious

SuperUser

use w/ caution, https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-migrate-a-referenced-interface/ta-p/330058

"jack of all trades, master of none"

hpenmetsa

Staff

Hi, if the interfaces already have references, it is not possible. it will be necessary to remove the interface from the respective references before being able to add the interface into the interface zone.
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Unable-to-add-interface-logical-and-physical/ta-p/287474

Sign up

Login with SSO

Login to the community

Login with SSO