Skip to main content
Dadda
Dadda
New Member
August 29, 2024
Question

vLAN as "untagged" and fortilink as "tagged"?

  • August 29, 2024
  • 2 replies
  • 1802 views

Hi. I'm new to this so please bare with me...

 

So, I have a small lab-setup at home with a FortiGate 70F and a FortiSwitch 108F-POE. The FW is located in the livingroom where my incomming internet is, and the SW is located in my home office. Between the FW and the SW is a small office-SW (located on the 2nd floor) with no support for vLAN. If I connect the fortilink interface on the FW to the fortilink interface on the fortiSW, everything works as expected even over the officeSW. However, the other devices connected to the office-SW then doesn't work since they don't get a vLAN (obviously).

 

My question is if it's possible to send BOTH the vLAN AND the fortilink traffic, with the vLAN as "primary" (or "untagged") over the same FW-interface so that I can use a single TP-cable.

 

Is this at all possible?

2 replies

HarshChavda
Staff
HarshChavda
Staff
August 29, 2024

Hello @Dadda ,

 

can you refer this document: https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-a-VLAN-tagged-interface-802-1q-on-a/ta-p/193893?externalId=FD30883

    Dadda
    DaddaAuthor
    New Member
    September 6, 2024

    Thanks @HarshChavda,

    I did some research by my self and hopefully I can now explain a little bit better what I'm trying to achive. What I'm after is that I want to connect my FortiGate to my FortiSwitch with FortiLink with a managed HP Layer 2 switch in between. Like this:

    FortiGate --> HP Layer 2 Switch --> FortiSwitch
        |                                    ^

         ---------- Fortilink ----------------

     

    This setup actually works fine when using an unmanaged switch from Netgear. The reason that I want to use a managed Layer 2 switch in between is that I want to take out certain vLANs from the HP-switch for devices connected to that.

    I've found some documentation regarding similar setups, thoug these require a layer 3 switch/router or that there's a Fortiswitch on each side of the layer 2 switch.

    Is this possible at all?

     

    //Daniel

    vbandha
    Staff
    vbandha
    Staff
    September 7, 2024

    Hi @Dadda ,

     

    Yes, this is possible.

     

    Here is another forum post with a similar query:

    https://community.fortinet.com/t5/Support-Forum/FortiLink-through-3rd-party-L2-switch/m-p/297694

     

    Regards,

    Varun

    Terms & ConditionsAccessibility statement