FortiSwitch
FortiSwitch: secure, simple and scalable Ethernet solutions
yabhishek
Staff
Staff
Article Id 353565
Description This article describes how to avoid misconfiguration of VLANs on trunk interfaces via GUI.
Scope FortiSwitch in Standalone mode.
Solution
In some scenarios, switches have multiple trunk interfaces. Let's say for example PO1 and PO6, and both the trunk interfaces will have different sets of VLANs:
 
  • Configuration of PO6:
 
edit "PO6"
        set allowed-vlans 23-24,26-27,29-31,34-35,40,45-54,56-57,59-60,62,67-70,72-74,79-80,84,86-87,89,91,93-94,96-98,100-106,151,153-154,157-158,161-168,173,176,800,811
        set snmp-index 74
    next
 
  • Configuration of PO1:
 
    edit "PO1"
        set allowed-vlans 10-12,18-19,21-24,26-31,34-37,40,45-60,62,67-70,72-77,79-81,84,86-87,89-91,93-94,96-98,100-106,141-142,150-158,161,166,168,173,176,207,800,811
        set snmp-index 69
    next
 
in GUI, when both the interfaces are selected and add a new VLAN (For Ex: 22 ) as below:
 
trunk-vlan-config.png

 

 
In this way Vlan-config of PO6 is overridden by the config of PO1, as seen in the below screenshot:
 
fianl_config.png

 

Therefore, while configuring VLANs on trunk interfaces, make sure that each trunk interface should be selected individually and then add VLANs.
 
Selecting multiple trunk interfaces for adding VLAN is only supported when all the selected trunk interfaces have an identical set of VLANs configured.
Contributors