Skip to main content
officeit
Explorer
September 11, 2025
Solved

FortiGate: VLAN Tagged on LAG, Untagged on Switch Port

  • September 11, 2025
  • 3 replies
  • 465 views

I have a TRUNK-LAG configured for Aggregate mode. This interface contains VLANs 40–48. I want to add VLAN 49 as tagged on the TRUNK-LAG and untagged on SWVL-49. How can I do this?

Screenshot 2025-09-11 144206.png

 

Screenshot 2025-09-11 144048.png

 

 

Best answer by AEK

As I said above, if you want it untagged you need to set the IP address 172.18.88.254 directly on the SWVL-49 interface, not on the VL-49 VLAN interface.

3 replies

AEK
SuperUser
SuperUser
September 11, 2025

To add tagged VLAN 49, click Create New > Interface, then:

  • Type: VLAN
  • VLAN ID: 49
  • Interface: Trunk-LAG
  • IP/Mask: x.x.x.x/x

For the untagged one, just set the IP address of the Trunk-LAG interface with the related IP address (instead of 0.0.0.0/0) and you are done.

AEK
officeit
officeitAuthor
Explorer
September 11, 2025
 

Screenshot 2025-09-11 144206.png
For this time i try to plug in on port5 i cannot get ip. Do you want to get more some detail ?

AEK
SuperUser
AEKAnswer
SuperUser
September 11, 2025

As I said above, if you want it untagged you need to set the IP address 172.18.88.254 directly on the SWVL-49 interface, not on the VL-49 VLAN interface.

AEK
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!