Skip to main content
motscmario
New Member
February 9, 2017
Solved

Fortigate 300C network problem

  • February 9, 2017
  • 5 replies
  • 12564 views

Hello!

 

I have two Fortigate 300C devices in two buildings. The connection is a layer 3 connection with static routes, as shown in the uploaded picture. The connection between the two Fortigates is configured on port 2. Also on Port 2 there is a tunnel interface with an IP address. The routing configuration between the Fortigates is static routing. On port 1 on both Fortigates is the connection to the local network of both buildings (connection to the main switches of the buildings).

 

Now I want to transport a second network from the Fortigate 1 over Port 2 to the Fortigate 2 device. This second network is connected on port 3 on the device Fortigate 1. The port on the Switch pointing to the Fortigate 1 is tagged, with one VLAN (VLAN ID 20). I want to transport this VLAN 20 tagged from port 3 (Fortigate 1) over the Port 2 to the other device Fortigate 2 and connect a switch on Port 3 on Fortigate 2. This switch will add this tagged VLAN 20 on his uplink port and then the other Ports will be untagged.

 

How can I configure the Fortigates, that the Layer 2 network will be transported over the Layer 3 network? I've tried to create a vlan subinterface on port 2 and then created a software switch, combing the vlan and the port 3, but it sadly didn't work.

 

I look forward to your reactions.

Mario

Best answer by brycemd

So, you want both fortigates to have the same layer2 network for this vlan20? What you are describing is a VXLAN.

 

To my knowledge this requires FortiOS 5.4:

http://kb.fortinet.com/kb/documentLink.do?externalID=FD38614

 

5 replies

brycemd
brycemdAnswer
New Member
February 9, 2017

So, you want both fortigates to have the same layer2 network for this vlan20? What you are describing is a VXLAN.

 

To my knowledge this requires FortiOS 5.4:

http://kb.fortinet.com/kb/documentLink.do?externalID=FD38614

 

motscmario
New Member
February 10, 2017

Exactly.

But also the other layer 3 network over the tunnel.

I will try to configure it, after the firmware upgrade.

 

Thank you!

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.