This article discusses the FortiLink interface IP setting on FortiGate in different scenarios.
Scope
FortiSwitch.
Solution
In the first scenario, there are layer-2 FortiLink setup. When Fortiswitch directly connects to FortiGate in FortiLink mode then it is possible to configure following setting:
config system interface edit "fortilink" set vdom "vdom1 set fortilink enable set switch-controller-source-ip outboud <----- Default config. set ip 169.254.1.1 255.255.255.0 set allowaccess ping fabric set type aggregate set member "port7" ... next end
This means the source IP address for the devices connecting to FortiGate is the outbound interface.
In the second scenario, there is a third-party switch/router/radio in between the FortiGate and FortiSwitch. In a remote location, it is possible to configure below setting:
config system interface edit "fortilink" set vdom "vdom1" set fortilink enable set switch-controller-source-ip fixed set ip 169.254.1.1 255.255.255.0 set allowaccess ping fabric set type aggregate set member "port7" ... next end
This means the devices can connect over layer-3 FortiLink to use source IP as FortiLink IP.
