Skip to main content
takarl2
Explorer
February 11, 2026
Question

Migrating Root on 100F to a VDOM on 3400E, maintain original WAN routing.

  • February 11, 2026
  • 4 replies
  • 193 views

I'm working on merging Root from my 100F firewall into a third VDOM on my 3400E firewall. That new VDOM will maintain its own peering connection that it had on the 100F. 

When I log into the 3400 Global, I see that the "System WAN" is X.X.X.X/31. I don't want the new VDOM routing through that due to necessary network segmentation because of contract requirements and such, so I would like some guidance on how to proceed with the configurations. 

4 replies

Toshi_Esumi
SuperUser
SuperUser
February 11, 2026

Why you don't like the /31 interface? Now it's getting more popular at least in the US. And it shouldn't be a matter unless you need to have multi-cast routing protocol like OSPF set up with your ISP. You need to explain what exactly you want to set up with the vdom, nobody can tell you anything that might be helpful.

Toshi

takarl2
takarl2Author
Explorer
February 11, 2026

Thanks. Updated it. But it's because of separate contracts, requirements, and segmentation. 

Toshi_Esumi
SuperUser
SuperUser
February 11, 2026

Still not clear what you need/want to do. Want to have another circuit terminated at the new VDOM without coming through 3400E's root vdom? If that's the case, you just need to put that particular port in the VDOM.

Toshi

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.