Description | This article describes that Port A and Port B seen in model FortiGate 60F/61F, 70F/71F, 80F/81F, and 90G/91G can be used as regular traffic ports. |
Scope | Entry-level FortiGate. |
Solution |
In earlier FortiGate models, there could be dedicated ports for DMZ or even HA (FortiGate 80E/81E). However, when upgrading such a model to a different or newer model, port index/numbering could change and DMZ or HA ports may no longer exist. In many models, there are ports called Port A and Port B as part of FortiLink.
These FortiLink Ports are pre-defined ports used to connect to FortiSwitch as a logical extension for the firewall. But if there is no plan to deploy FortiSwitch, Port A and Port B can be used as regular traffic ports (RJ45), for example, mapping DMZ port to Port A and HA port to Port B.
Modify the default setting and make Port A and Port B available to use. With the factory default settings, Port A and Port B are configured to be included in the FortiLink interface as seen below.
config system interface
The following procedure/screenshot explains how to remove port A and port B from FortiLink. FortiLink if not used can also be deleted (not deleted in the screenshot below):
As can be seen above, Port A and Port B now show up as regular unused traffic ports.
Such info can also be seen in the FortiGate 60F/61F datasheet. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.