Skip to main content
fjulianom
fjulianom
Explorer II
December 7, 2017
Question

Switchport access in FortiGate

  • December 7, 2017
  • 2 replies
  • 23299 views

Hi guys,

 

My customer wants to replace his Cisco router by a FortiGate. It has many ports as trunks allowing some VLANs, and I know I can easily accomplish this in the FortiGate. But it has also one port as switchport in access mode associated to one VLAN, like this:

 

interface GigabitEthernet0/1/0  switchport access vlan 88  no ip address

 

interface Vlan88

 ip address 10.8.8.1 255.255.255.0

 

The FortiGate will be operating in NAT mode. How can I create a FortiGate port in access mode associated to one VLAN as above?

 

Regards,

Julián

    2 replies

    emnoc
    emnoc
    New Member
    December 7, 2017

    config sys interface

     

       edit port1

          set ip 10.8.8.1 255.255.255.0

          set vdom root

          set allowaccess ping

        end

     

    That's a standard interface using a non-tag interface.

     

    Ken

     

    fjulianom
    fjulianomAuthor
    Explorer II
    December 7, 2017

    Hi Ken,

     

    But that port is associated to none VLAN, and also an access port has no IP address.

     

    Regards,

    Julián

     

    fjulianom
    fjulianomAuthor
    Explorer II
    December 8, 2017

    Hi guys,

     

    Any idea? Is that possible?

     

    Regards,

    Julián

    sw2090
    SuperUser
    sw2090
    SuperUser
    September 21, 2021

    hm I remember this from dell switches. Ist it the same on CIsco?

    On Dell Switch access port simply means it is untagged in the named vlan (here vid 88). A switch Port indeed doesn't have an Ip. The switch may have an ip in that vlan subnet.

     

    FortiOS imo cannot do this. It can have vlan interfaces that can have one (or more) ips but you cannot chose between the vlan moduses like tagged,untagged,forbid,etc. Afair vlan interfaces on fortios will only take tagged packets and will ignore packets with non matching vlan tag (or no vlan tag at all) which equals to the port being tagged in that vlan (and set to no or forbid in all others) on a switch.

     

    Terms & ConditionsAccessibility statement