Skip to main content
marconet-22
marconet-22
Explorer II
November 21, 2023
Question

Fortigate 60F - create n°2 ports in trunk

  • November 21, 2023
  • 3 replies
  • 4219 views

Hi Guys

I need to set n°2 interfaces of Fortigate 60F (7.4.1) as core switch.

Both interface in trunk ports with 8 VLAN, and Fortigate run as LAYER 3 switch in both interfaces

 

Someone have an idea how can sets it?

3 replies

AEK
SuperUser
AEK
SuperUser
November 21, 2023

Hello

  1. Create a new LACP interface with 2 interfaces
  2. Add to this new interface your 8 VLAN interfaces, each with its VLAN id

https://community.fortinet.com/t5/FortiGate/Technical-Tip-LACP-support-for-entry-level-E-series/ta-p/193714

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-a-VLAN-tagged-interface-802-1q-on-a/ta-p/193893

AEK
    marconet-22
    marconet-22Author
    Explorer II
    November 21, 2023

    Hi

    I need to connect two different switch to these ports.

     

    Thank you

    AEK
    SuperUser
    AEK
    SuperUser
    November 21, 2023

    Hi

    So you can do LACP if your switches are stacked or MLAG.

    AEK
      marconet-22
      marconet-22Author
      Explorer II
      November 27, 2023

      I solved the issue:

      First, I configured Software switch with port 5 and port 6 and I assigned L3 Ip Address

      Second, I created new VLAN and I joined it to an interface type (Software switch created before)

       

      thanks

      Toshi_Esumi
      SuperUser
      Toshi_Esumi
      SuperUser
      November 21, 2023

      What are "n°2 interfaces" on FG60F? 

       

      Toshi

        marconet-22
        marconet-22Author
        Explorer II
        November 27, 2023

        In Italian style means number two interfaces(Cisco)/ports(Fortigate)

         

        Marco

        Toshi_Esumi
        SuperUser
        Toshi_Esumi
        SuperUser
        November 28, 2023

        Ok, I didn't know. By the way FGTs are never good switches. Especially when you use soft-switch, vlan traffic needs to be handled by the CPU. It would impact overall performance. If you have any decent switches, I would move the switching function to the switch then just have one aggregated connection between the switch and the 60F then put all VLANs on the LAG. And then the 60F can have L3 VLAN interfaces.

         

        Toshi

          Terms & ConditionsAccessibility statement