Transparent Mode in Single Interface

Forum|Forum|5 years ago
May 11, 2021
5 replies
6572 views

Greetings,

I am trying to setup Fortigate 100E in transparent mode,

and just because of current network condition, it need to setup only with one interface as attached.

Is it possible to do ?

Thank you.

14.JPG

emnoc

New Member

Why ?

A transparent mode typically has 2 interfaces ( in and out ) . In that diagram you can't control any part of the flow since it does not go thru the firewall.

Are you looking at doing IDS and need a one-leg configuration?

Ken Felix

rantAuthor

New Member

Actually I want to setup the new Fortigate without changing the physical layer.

The main goal is same with transparent mode that to control the data flow from internal and external traffic.

I guess this is not possible to achieve with pure config in Fortigate..

or are there any config should I try ?

lobstercreed

New Member

This has nothing to do with FortiGate config. If you understand networking at layer 2 at all, there is nothing that could convince the traffic to go from that middle device (switch?) to the FortiGate rather than straight to the router it is directly connected to. "Router on a stick" is the only configuration where you can use a single interface to control flows and that means NAT mode, not transparent. If you want to use transparent mode you have to move the link between your switch and router to a second interface on the FortiGate so that the only path for the various VLANs to reach their gateway (northbound traffic to the router) is through the FortiGate.

Sign up

Login with SSO

Login to the community

Login with SSO