New Member

Question

How to switch defined vlan on Fortilink interface with vxlan

Forum|Forum|11 months ago
June 14, 2025
5 replies
1056 views

Hello,

I need some help in the following topic, I am note able to solve to mix external end internal vlans into Fortilink.

There is a FortiGate connected to 8 FortiSwitches via FortiLink interfaces. VLANs and subnets created on the FortiLink can be used on the switches without any issues. However, I need to be able to forward a VLAN arriving in a VXLAN to a specific FortiSwitch port.

I can pass the incoming VXLAN as a trunk through a software switch to a manually configured switch without FortiLink, and I can use the VLANs. However, in this case, I lose the switch controller functionality, or I have to establish a separate physical connection.

I would like to request assistance on how to switch a VLAN within a VXLAN to VLANs defined on FortiLink, or how to forward all tagged VLANs existing within the VXLAN to the switches via FortiLink.

Thank you fro your help in advance.

Regards,

Antal

Jean-Philippe_P

Staff & Editor

Hello Tony79,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Jean-Philippe - Fortinet Community Team

Jean-Philippe_P

Staff & Editor

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

Jean-Philippe - Fortinet Community Team

SuperUser

i think that as described in this article, https://community.fortinet.com/t5/FortiGate/Technical-Tip-VXLAN-over-IPsec-for-multiple-VLANs-using-software/ta-p/195488 , you would need to do the mapping of vni / vlan interface on the switch interface accordingly.

"jack of all trades, master of none"

Tony79Author

New Member

Thank you for your help. I have problem with this solution, that I cannot add vlan on Fortilink interface to the Software switch.

Staff

Hi Tony79,

We have an official article on LAN extensions between FortiGates.

https://docs.fortinet.com/document/fortigate/7.6.3/administration-guide/097658/example-gui-configuration

As for using the software switch, you have to make sure the VLAN you add to it, has no other references at all - no IP address, no DHCP server etc.

https://docs.fortinet.com/index.php/document/fortigate/7.6.0/administration-guide/277799/software-switch