FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
JianWu
Staff
Staff
Article Id 355255
Description This article describes that Port A and Port B seen in model FortiGate 60F/61F, 70F/71F, 80F/81F, and 90G/91G can be used as regular traffic ports.
Scope Entry-level FortiGate.
Solution

In earlier FortiGate models, there could be dedicated ports for DMZ or even HA (FortiGate 80E/81E). However, when upgrading such a model to a different or newer model, port index/numbering could change and DMZ or HA ports may no longer exist. In many models, there are ports called Port A and Port B as part of FortiLink.

 

These FortiLink Ports are pre-defined ports used to connect to FortiSwitch as a logical extension for the firewall.

But if there is no plan to deploy FortiSwitch, Port A and Port B can be used as regular traffic ports (RJ45), for example, mapping DMZ port to Port A and HA port to Port B.

 

Modify the default setting and make Port A and Port B available to use.

With the factory default settings, Port A and Port B are configured to be included in the FortiLink interface as seen below.

 

config system interface
    edit "fortilink"
        set vdom "root"
        set fortilink enable
        set ip 10.255.1.1 255.255.255.0
        set allowaccess ping fabric
        set type aggregate
        set member "a" "b"
        set lldp-reception enable
        set lldp-transmission enable
        set snmp-index 16
    next
end

 

FGT-default-FortiLink.PNG

 

The following procedure/screenshot explains how to remove port A and port B from FortiLink.

FortiLink if not used can also be deleted (not deleted in the screenshot below):

 

FGT-FortiLink-RemovingPortAB.PNG

 

FGT-FortiLink-RemovingPortAB-view.PNG

 

As can be seen above, Port A and Port B now show up as regular unused traffic ports.

 

Such info can also be seen in the FortiGate 60F/61F datasheet.