Skip to main content
networkers
New Member
December 3, 2025
Solved

VDOM partitioning design

  • December 3, 2025
  • 1 reply
  • 285 views

Dear all,

 

we would like to use VDOM partitioning. In every example I found the FortiGates are ind of connected fully meshed, every vdom uses its own physical interface.  I actually want to do something different:

 

2 FortiGates (FGCP), both with:

- WAN link uses 2 10GbE Interfaces with LACP

- LAN link uses 2 10GbE Interfaces with LACP

 

root VDOM on vcluster 1 (FortiGate FGCP A1.1)

vdom1 VDOM on vlcuster 2 (FortiGate FGCP A1.2)

 

Do I need separate physical interfaces for each VDOM or may I share all physical links between vdoms, i.e. using different VLANs on top of the physical links (i.e. WAN and LAN interfaces)?

partitioning.png

 

 

 

Best answer by xshkurti

@networkers 
You can have multiple VLANs on top of physical interfaces and assign different VLANs to different VDOMs.
Normally physical interfaces will stay in root VDOM as it is the management vdom as well.

1 reply

xshkurti
Staff
xshkurtiAnswer
Staff
December 3, 2025

@networkers 
You can have multiple VLANs on top of physical interfaces and assign different VLANs to different VDOMs.
Normally physical interfaces will stay in root VDOM as it is the management vdom as well.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!