Skip to main content
kingpin
kingpin
New Member
August 11, 2019
Question

SUBNET

  • August 11, 2019
  • 3 replies
  • 10519 views

help me guys im new with fortinet my question is i have existing router MIKROTIK i have 16 subnet all connected in one interface but planning all to transfer  in fortinet 200e the same configuration because some of my switch is not manage switch. how to config one interfaces with 16 subnet thanks 

    3 replies

    emnoc
    emnoc
    New Member
    August 11, 2019

    You do secondaries . I believe you can do up to 16 secondaries per interface

     

    https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-networking-54/Interfaces/Secondary%20IP%20addresses%20to%20an%20interface.htm

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    August 11, 2019

    The max value doc for 6.0 says up to even 32/interface.

    https://help.fortinet.com.../6-0-0/max-values.html

    kingpin
    kingpinAuthor
    New Member
    August 13, 2019

    thanks for your reply but. what i need is i can configure in one interface the vlan. more that 16 subnet but my question is not working in ordinary switch. 

    wearfear
    wearfear
    New Member
    August 22, 2019

    Create new interface and chose VLAN and attach it to your physical interface.

    If you are running 16 subnets on the same L2 Domain, you really should think about doing something about it.

     

    Mikrotik is very flexible and does everything that is possible, but it also does stuff that is REALLY bad practice which other providers usually block.

     

    I think fortinet only supports 2 IP's.

     

     

    kingpin
    kingpinAuthor
    New Member
    August 23, 2019

    thanks for your reply. but i try 16 vlan in one interface working but my question is how to communicate each other because in policy need to config 1 by 1. do i need to make group or zone for my vlan??? thanks

    wearfear
    wearfear
    New Member
    August 23, 2019

    You will need to create the 16 vlans and attach it to the interface that you want.

    Zones could be a good way to do it if you're never in the future gonna have to limit access between the vlans.

     

    Since it's a statefull firewall. If you expect hosts to start sessions both ways you need to make 2 policies for each VLAN interface permitting your traffic.

     

     

    Terms & ConditionsAccessibility statement