Skip to main content
jzeferino
Staff
jzeferino
Staff
October 4, 2025
Question

Fortigate as Router on a stick, along with local access ports on one of the VLANs. Can it be done?

  • October 4, 2025
  • 2 replies
  • 670 views

Hello.

 

I'm trying to set up an 81F (FortiOS 7.6.4) as router on a stick. It would be a staight forward action, however I'd like to have other interfaces set as access mode on one of the VLANs that are supposed to go through the trunk. For example, internal5 would be the trunk (VLANs 10 and 20 tagged), and internal2 and internal4 should also allow untagged access to VLAN 20.

 

I've stumbled on this article https://community.fortinet.com/t5/FortiGate/Technical-Tip-Comparing-Hardware-switches-Software-switches-and/ta-p/210092 and it kind of addresses the issue, if I set a virtual switch per each of the trunk's VLANs, while leaving one interface dedicated for trunk (instead of declaring dot1q entries).

 

Is there a proper way of accomplishing this? 

 

Thanks in advance for any insights, and all the best. 

2 replies

ebilcari
Staff
ebilcari
Staff
October 5, 2025

If I get it right, this scenario should be covered here: Example 2: LAN extension

Emirjon
jzeferino
Staff
jzeferinoAuthor
Staff
October 5, 2025

It does, for the case that a VLAN is both made available as untagged on available Fortigate interfaces and tagged, on the designated trunk only port.

 

But how can other 802.1Q VLANs be added to that trunk only interface, in this setup (those that do not require any local access mode interfaces)?

 

Thanks 

Terms & ConditionsAccessibility statement