Skip to main content
motscmario
New Member
February 9, 2017
Solved

Fortigate 300C network problem

  • February 9, 2017
  • 1 reply
  • 12534 views

Hello!

 

I have two Fortigate 300C devices in two buildings. The connection is a layer 3 connection with static routes, as shown in the uploaded picture. The connection between the two Fortigates is configured on port 2. Also on Port 2 there is a tunnel interface with an IP address. The routing configuration between the Fortigates is static routing. On port 1 on both Fortigates is the connection to the local network of both buildings (connection to the main switches of the buildings).

 

Now I want to transport a second network from the Fortigate 1 over Port 2 to the Fortigate 2 device. This second network is connected on port 3 on the device Fortigate 1. The port on the Switch pointing to the Fortigate 1 is tagged, with one VLAN (VLAN ID 20). I want to transport this VLAN 20 tagged from port 3 (Fortigate 1) over the Port 2 to the other device Fortigate 2 and connect a switch on Port 3 on Fortigate 2. This switch will add this tagged VLAN 20 on his uplink port and then the other Ports will be untagged.

 

How can I configure the Fortigates, that the Layer 2 network will be transported over the Layer 3 network? I've tried to create a vlan subinterface on port 2 and then created a software switch, combing the vlan and the port 3, but it sadly didn't work.

 

I look forward to your reactions.

Mario

Best answer by brycemd

So, you want both fortigates to have the same layer2 network for this vlan20? What you are describing is a VXLAN.

 

To my knowledge this requires FortiOS 5.4:

http://kb.fortinet.com/kb/documentLink.do?externalID=FD38614

 

1 reply

brycemd
brycemdAnswer
New Member
February 9, 2017

So, you want both fortigates to have the same layer2 network for this vlan20? What you are describing is a VXLAN.

 

To my knowledge this requires FortiOS 5.4:

http://kb.fortinet.com/kb/documentLink.do?externalID=FD38614

 

motscmario
New Member
February 10, 2017

Exactly.

But also the other layer 3 network over the tunnel.

I will try to configure it, after the firmware upgrade.

 

Thank you!