FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
maulishshah
Staff
Staff
Article Id 330058
Description This article describes how to migrate referenced interfaces to a new interface zone.
Scope FortiGate.
Solution

FortiGate has a feature named integrate interface that makes it possible to migrate a physical interface or change the interface settings without changing each reference.

 

Note:

Integrate Interface only works with Physical Interface, not with VLANs. 

 

This article illustrates an example of how to migrate a current WAN interface to a new Interface zone.

 

  1. Note that the interface has 43 references. There is no option to migrate to a new interface zone because it is already referenced.

 

Capture_1.PNG

 

 

  1. There is no option for port5.

 

maulishshah_0-1722601936274.png

 

  1. Select Port5. It will then be possible to select the integrated interface.

 

maulishshah_1-1722601936278.png

 

  • In v 7.6, the Integrate Interface option has been relocated. To access it, simply right-click on the interface, and the Integrate Interface option will appear.

 

  1. The next step is to Migrate to Zone.

maulishshah_2-1722601936281.jpeg

 

  1. Name the new Zone.

maulishshah_3-1722601936282.png

 

  1. The entries that need to be updated will be presented.

maulishshah_4-1722601936283.jpeg

 

  1. If the interface is in any configuration like the interface is in the multicast routing, OSPF, or System HA, remove it first to prevent errors.

maulishshah_5-1722601936285.jpeg

 

 

  1. Remove the port from the CLI (the example uses in-system HA):

    330058.png
    config sys ha
        unset monitor
    end

 

  1. Confirm that the reference is now 42 instead of 43.

 

maulishshah_7-1722601936288.jpeg

 

 

  1. Once again, try to migrate the interface to the zone:

 

maulishshah_8-1722601936291.jpeg

 

  1. This time, the zone will have been updated successfully:

 

maulishshah_9-1722601936292.png

 

 

Note

Physical interface cannot migrate to another Physical interface, it just requires to change the configuration along with its reference.