Software Switch with VLANs and separate Ports

Based on the Administration guide:  a software switch functions like a single interface. It has one IP address, and all the interfaces in the software switch are on the same subnet.

I think you should create two separate Software switches and group the respective ports.

hi,

if you want only certain ports to assign a specific vlan in your case you would need to create a separate software/hardware/vlan switch with those ports but there's a limitation that you should be aware that the same vlanid can exist on different interfaces under certain conditions : https://community.fortinet.com/t5/FortiGate/Technical-Tip-Hardware-switch-Software-switch-VLAN-switch-Use/ta-p/210153#:~:text=Another%20common%20question%3A%20is%20it%20possible%20to%20have%20a%20VLAN%20configured%20on%20multiple%20ports%3F 

i'm not a big fan of those 'virtual'-switches on FGT and would recommend that you do LAG/port-channel towards the switches instead

hey, 

puh FGT is complicated, the endconfiguration of my networks are 10 VLANs, and my brain is on the limit with the configuration.

i need 1 Trunkport (X1, X2) with all VLANs to the Switch, and 4 Ports for VLAN20 , and the other 4 to a VLAN15.

My problem now is that the Software Switch with all VLANs on Ports X1 and X2. I configured Port 4-8 with a Software Switch and created the needed VLAN with the ID 20, but it doesn't work, ig got no ip from the dhcp... 

my brains stucks a little bit..

Hey.. i configured the LAG1, all VLANs over the ARUBA Switch available.

i configured port5 for VLAN16, but my NAS  becomes no IP over the DHCP Server from VLAN16... what's wrong? 

i tried this: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Hardware-switch-Software-switch-VLAN-switch-Use/ta-p/210153#:~:text=Another%20common%20question%3A%20is%20it%20possible%20to%20have%20a%20VLAN%20configured%20on%20multiple%20ports%3F

I configured a VLAN-Switch, with VLAN16 and port5, it is the same, i got no ping from the FGT or something, i tried with laptop, but i dont become a ip address from VLAN16.

i tried a allow policy from VLAN16a to VLAN16, or LAG01-Aruba, dst=all, src=all, services=all no nat, with no luck.. 

config system interface     edit "mgmt"         set vdom "root"         set ip 192.168.1.99 255.255.255.0         set allowaccess ping https ssh         set type physical         set dedicated-to management         set role lan         set snmp-index 2     next     edit "wan1"         set vdom "root"         set mode dhcp         set allowaccess ping speed-test         set type physical         set lldp-reception enable         set role wan         set snmp-index 3         config ipv6             set ip6-allowaccess ping         end     next     edit "LAG01-Aruba"         set vdom "root"         set ip 172.16.1.1 255.255.255.0         set allowaccess ping https http         set type aggregate         set member "port15,port16"         set device-identification enable         set lldp-transmission enable         set role lan         set snmp-index 35         set algorithm L3     next      edit "fortilink"         set vdom "root"         set fortilink enable         set ip 10.255.1.1 255.255.255.0         set allowaccess ping fabric         set type aggregate         set lldp-reception enable         set lldp-transmission enable         set snmp-index 28     next      edit "Server VLAN"         set vdom "root"         set ip 172.16.5.254 255.255.255.0         set allowaccess ping radius-acct speed-test         set alias "VLAN5"         set device-identification enable         set role lan         set snmp-index 31         set interface "LAG01-Aruba"         set vlanid 5     next      edit "Camera-Network"         set vdom "root"         set ip 172.16.16.254 255.255.255.0         set allowaccess ping radius-acct speed-test         set alias "VLAN16"         set device-identification enable         set role lan         set snmp-index 32         set interface "LAG01-Aruba"         set vlanid 16     next      edit "VLAN17"         set vdom "root"         set ip 172.16.17.1 255.255.255.0         set allowaccess ping radius-acct speed-test         set alias "Guest-WiFi-Network"         set device-identification enable         set role lan         set snmp-index 33         set interface "LAG01-Aruba"         set vlanid 17     next      edit "IoT-Netzwerk"         set vdom "root"         set ip 172.16.15.254 255.255.255.0         set allowaccess ping speed-test         set alias "VLAN15"         set device-identification enable         set role lan         set snmp-index 29         set interface "LAG01-Aruba"         set vlanid 15     next      edit "VLAN16a"         set vdom "root"         set allowaccess ping         set vlan-protocol 8021ad         set device-identification enable         set role lan         set snmp-index 27         set interface "port5"         set vlanid 16     next