Same VLAN on Multiiple Fortilink Interfaces

Hello claydawg,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Hello claydawg,

This document may help you with what you need: https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/454200/multiple-fortiswitches-managed-via-hardware-software-switch

Let me know if you need further help, or feel free to contact us.

Kind regards,

Hi @claydawg,  

I would suggest configuring only a single fortilink to manage both switches. 

Regards, 

Thanks. This is a huge drawback of FortiLink. I understand the simplicity of it, but it really limits your ability to customize the network after the fact.

Hi, I have read entire topic and still I can not believe that If I have two fortilink on fortigate, I can not have the same vlan o two FL??
So, I we build new rack on different floor, I have to continue my current fortilink from the last switch to the new rack on next floor?

It is common use that a vid is unique per interface. Its the same everywhere. If you need more lines you will need a switch. This can be a physical one next to your FGT or you could create a vswitch out of your fortilink ports on your FGT (which they already are by factory default AFAIR).Then just create a vlan interface on that switch and you can use your vlan on every fortilink port.

Creating VLAN sub-interfaces with the same VLAN ID on multiple FortiLink interfaces on a FortiGate is not supported. Each VLAN sub-interface must have a unique VLAN ID to avoid conflicts. To extend a particular VLAN to both FortiLink-managed switches, consider reconfiguring the network architecture to use a single FortiLink interface for the VLAN to ensure proper functionality and avoid potential issues with duplicate VLAN IDs on different interfaces.

Hi @claydawg,

I have the same question, but I cannot find any usefull answer unfortunately. So did you succeed to setup several Fortiswitch loops, each connected through its own fortilink with a same VLANID setup on each FLink (in order to have a same VLAN on several switch loops)? Actually I know that the VLANID tagging will not be the issue, but it is at the layer3 level that the question is. The layer 3 GW handled by FGT, will be only on one Flink only. Then my question is, should it work with policies between Flinks ? to make possible the communication between hosts from on switch loop 1 to VLAN GW, and the same from hosts on switch loop 2 ?
Insane for me to write this, hope I will never have to implement fortiswitches in large campus env.
thx for your feedback.

The FortiSwitches solution has some topology limitations that other vendors do not have. In your case, although it is not cost-effective, it is recommended to place a distribution switch between the FortiGate and the switches. This way you have more freedom and options to design regular topologies normally used in enterprise campuses.