FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Biraman
Staff
Staff
Article Id 257285
Description

This article describes that VLAN interfaces configured with large number of references take a lot of time to migrate from one interface to another as every reference have to be moved one by one individually.

Interface migration wizard got introduced from FortiOS 7.0 which helps in migrating the References from a physical Interface to either an Aggregate interfaces, redundant interfaces or software switch.

 

However for VLAN interfaces this option is greyed out and this article shares a solution to migrate the VLAN interfaces along with referneces from the Parent Interface to FortiLink interface.

Scope FortiGate.
Solution

FortiGate is Configured with 3 VLANs (Vlan60, Vlan80, and Vlan100), and all VLANs are configured under interface port17. All VLANs have some references used for Policies, Address Objects, Static routes, or VIP.

 

Warning:

Take a config backup of the FortiGate before migrating the interfaces and have the changes scheduled in a Maintenance window. Avoid accessing the FortiGate with the same interface to avoid being locked out).

Vlans.JPG

 

For Individual VLAN Interfaces, the Option to Integrate the Interface is Greyed out.

 

Greyed.JPG
However, the Parent Interface (Port17) has the option to be migrated and this migrating Parent Interface will migrate all the child VLAN interfaces to the desired FortiLink interface or it can be any other Aggregate interfaces, redundant interfaces, or software switch.

 

Parentinterface.JPG

 

Then Select Migrate to Interface and select 'Next'.

 

Migrate.JPG

 

 The next step involves selecting the Target interface and for this example, FortiLink is selected and select 'Next'.

 

FortilinkSelect.JPG
Review the objects to be Migrated and for this example, All three VLANs are listed, select 'Apply' and then 'Ok'.


VlanMigrate.JPG

 

Entries are Successfully updated, So it is time to Close the Wizard and verify the migrated objects.

 

Updated.JPG

 
All three VLANs are successfully migrated under FortiLink along with references.

 

Sucess.JPG

 
Now, if the old Parent interface (Port17) is not required to be part of FortiLink, it can be easily taken out by selecting the cross button and selecting 'Ok', Now Port 17 can be used for any other Purpose.

 

Remove.JPG

 

 

Contributors