FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
nvisentin_FTNT
Description
This article explains how FortiGate can share a VLAN across multiple VDOMs using emac-vlan interfaces.
fgt6.0sche.jpg

Solution
First the VLAN interface must be created :

config system interface 
edit "vlan128" 
set vdom "root" 
set interface "port9" 
set vlanid 128 
next 
end 

Then bind your emac-vlan interfaces to that VLAN interface :
config system interface 
edit "vlan128-v1" 
set vdom "v1" 
set ip 10.128.0.1 255.255.255.0 
set allowaccess ping 
set type emac-vlan 
set interface "vlan128" 
next 
end 
 
config system interface 
edit "vlan128-v2" 
set vdom "v2" 
set ip 10.128.0.2 255.255.255.0 
set allowaccess ping 
set type emac-vlan 
set interface "vlan128" 
next 
end 

Verification :

FGT6HD3916800222 (v1) # get router info routing-table all 
Routing table for VRF=0 
Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP 
O - OSPF, IA - OSPF inter area 
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 
E1 - OSPF external type 1, E2 - OSPF external type 2 
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area 
* - candidate default 

C 10.128.0.0/24 is directly connected, vlan128-v1 

FGT6HD3916800222 (v1) # exe ping 10.128.0.254 
PING 10.128.0.254 (10.128.0.254): 56 data bytes 
64 bytes from 10.128.0.254: icmp_seq=0 ttl=64 time=0.5 ms 
64 bytes from 10.128.0.254: icmp_seq=1 ttl=64 time=0.1 ms 
^C 
--- 10.128.0.254 ping statistics --- 
2 packets transmitted, 2 packets received, 0% packet loss 
round-trip min/avg/max = 0.1/0.3/0.5 ms 


FGT6HD3916800222 (v2) # get router info routing-table all 
Routing table for VRF=0 
Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP 
O - OSPF, IA - OSPF inter area 
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 
E1 - OSPF external type 1, E2 - OSPF external type 2 
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area 
* - candidate default 

C 10.128.0.0/24 is directly connected, vlan128-v2 

FGT6HD3916800222 (v2) # exe ping 10.128.0.254 
PING 10.128.0.254 (10.128.0.254): 56 data bytes 
64 bytes from 10.128.0.254: icmp_seq=0 ttl=64 time=0.2 ms 
64 bytes from 10.128.0.254: icmp_seq=1 ttl=64 time=0.2 ms 
^C 
--- 10.128.0.254 ping statistics --- 
2 packets transmitted, 2 packets received, 0% packet loss 
round-trip min/avg/max = 0.2/0.2/0.2 ms 

Contributors