Skip to main content
yew
New Member
November 12, 2019
Question

FortiSwitch integrate with FortiGate

  • November 12, 2019
  • 1 reply
  • 2765 views

Hi,

 

How to integrate FortiSwitch with FortiGate to control intra VLAN ports?

 

My FortiSwitch is my access switch running on single VLAN, how to apply Fortigate policy scan from port1 to port 2?

 

 

    1 reply

    boneyard
    Valued Contributor
    November 29, 2019

    have a look at the documentation about this:

    https://help.fortinet.com/fos50hlp/56/Content/FortiOS/fortigate-managing-fortiswitch/Introduction.htm

     

    and for port isolation look at

    Enabling and disabling switch-controller access VLANs through FortiGateAccess VLANs are VLANs that aggregate client traffic solely to the FortiGate. This prevents direct client-to-client traffic visibility at the layer-2 VLAN layer. Clients can only communicate with the FortiGate. After the client traffic reaches the FortiGate, the FortiGate can then determine whether to allow various levels of access to the client by shifting the client's network VLAN as appropriate.

    Use enable to allow traffic only to and from the FortiGate and to block FortiSwitch port-to-port traffic on the specified VLAN. Use disable to allow normal traffic on the specified VLAN.

    config system interface

    edit <VLAN name>

    set switch-controller-access-vlan {enable | disable}

    next

    end

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.