FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Article Id 257285

This article describes that VLAN interfaces configured with large number of references take a lot of time to migrate from one interface to another as every reference have to be moved one by one individually.

Interface migration wizard got introduced from FortiOS 7.0 which helps in migrating the References from a physical Interface to either an Aggregate interfaces, redundant interfaces or software switch.


However for VLAN interfaces this option is greyed out and this article shares a solution to migrate the VLAN interfaces along with referneces from the Parent Interface to FortiLink interface.

Scope FortiGate.

FortiGate is Configured with 3 VLANs (Vlan60, Vlan80, and Vlan100), and all VLANs are configured under interface port17. All VLANs have some references used for Policies, Address Objects, Static routes, or VIP.



Take a config backup of the FortiGate before migrating the interfaces and have the changes scheduled in a Maintenance window. Avoid accessing the FortiGate with the same interface to avoid being locked out).



For Individual VLAN Interfaces, the Option to Integrate the Interface is Greyed out.


However, the Parent Interface (Port17) has the option to be migrated and this migrating Parent Interface will migrate all the child VLAN interfaces to the desired FortiLink interface or it can be any other Aggregate interfaces, redundant interfaces, or software switch.




Then Select Migrate to Interface and select 'Next'.




 The next step involves selecting the Target interface and for this example, FortiLink is selected and select 'Next'.


Review the objects to be Migrated and for this example, All three VLANs are listed, select 'Apply' and then 'Ok'.



Entries are Successfully updated, So it is time to Close the Wizard and verify the migrated objects.



All three VLANs are successfully migrated under FortiLink along with references.



Now, if the old Parent interface (Port17) is not required to be part of FortiLink, it can be easily taken out by selecting the cross button and selecting 'Ok', Now Port 17 can be used for any other Purpose.