FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
dbhavsar
Staff
Staff
Article Id 311170
Description This article describes the solution to an issue where it is not possible to add an interface in the software switch.
Scope FortiGate.
Solution

Below are the things to check first before adding the interface:

  1. The interface should have 0 references.
  2. The device detection should be disabled and the role should be defined.
  3. The IP should be '0.0.0.0/0' on the interface to add or it will not be listed to add.


As visible when the interface has an IP address defined, the option to add that interface is not listed:


ip-configured.jpg

 

CLI:

 

config system switch-interface

edit VLAN-Switch

new entry 'VLAN-Switch' added

set vdom root

set member
*interface-name Physical interface name.
port2 interface
port4 interface
port5 interface
port6 interface
port7 interface
port8 interface
port9 interface
port10 interface

 

set member port3
entry not found in datasource

value parse error before 'port3'
Command fail. Return code -3

end


The solution is to remove the IP address and to remove the role defined. Once processed, an option to add that interface appears:


no-ip-config.jpg

 

CLI:

 

config system switch-interface

edit VLAN-Switch

new entry 'VLAN-Switch' added

set vdom root

set member

*interface-name Physical interface name.
port2 interface
port3 interface
port4 interface
port5 interface
port6 interface
port7 interface
port8 interface
port9 interface
port10 interface

set member port3

end

 

show system switch-interface
config system switch-interface
    edit "VLAN-Switch"
        set vdom "root"
        set member "port3"
    next
end