Skip to main content
ITadm
ITadm
New Member
March 7, 2019
Solved

Interfaces and VLANs

  • March 7, 2019
  • 1 reply
  • 7092 views

Hello, 

 In all of my locations I'm using managed switches, so I only have to create VLAN interfaces for one of the ports and switch sends tagged traffic to one of the virtual interfaces. Now I have one exception and I need to configure everything without a switch. I need to connect my FortiGate 30E to an Access point with 3 different SSIDs (3 VLANs), a printer and VoIP telephone, so I need 4 VLANs + WAN to do this. With a switch, I'd just create some VLANs on specific ports and switch would do the magic with tagged and untagged ports.

 

I can see that there are:

-Loopback interface

-Hardware switch

-Software switch

-WiFi SSID

-PPPoE

-EMAC VLAN

 

I couldn't find a cookbook on Forti youtube that explains what's the difference between them. Can you guys give me a clue how to do this?

    Best answer by Jirka1

    If you enter an IP address on the port under which you have VLANs, it behaves like an untagged port.

     

    So, for example, set:

    port1 192.168.1.1/24 will be untagged (vlan1) vlan2 192.168.2.1/24 will be tagged as vlan2 vlan4 192.168.3.1/24 will be tagged as vlan3 vlan4 192.168.4.1/24 will be tagged as vlan4

     

    Jirka

    1 reply

    Jirka1
    Jirka1
    Explorer II
    March 7, 2019

    Hi,

    30E does not allow VLAN configuration using GUI. You'll need to do this with CLI:

    config system interface edit <vlan name> set vlanid <1-4094> set interface <> end

    config system interface edit <vlan name> set ip <IP address> <Network mask> end

     

    Jirka

    ITadm
    ITadmAuthor
    New Member
    March 7, 2019

    Hi Jirka, 

     Thanks for your response, I can create VLAN from GUI:

     

     

    The case is I need to use for example:

    port 1 vlan 1,2,3

    port 2 vlan 1

    port 3 vlan 4

     

    Port 1 is for AP with different SSIDs, one VLAN for each.

    Jirka1
    Jirka1
    Explorer II
    March 7, 2019

    ah, I understand. You can not have the same VLAN on multiple ports. I do not see a problem in the other settings. Simply create the VLAN with the desired number and add it to the port. Continue with all the VLANs you need.

     

     

    Jirka

    Terms & ConditionsAccessibility statement