Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Breakfast_assortment
New Contributor

solved

solved

2 REPLIES 2
Toshi_Esumi
Esteemed Contributor III

You should port FGT config instead of Juniper's at this forum. If you want to ask about Juniper config you should go to their communities at "Elevate" https://community.juniper.net/home

 

First, FGT doesn't have concept of "native vlan" because it's NOT a L2 switch or L2/L3 switch-router. So the untagged VLAN 200 on the Juniper side connects to the physical/parent/non-tagged interface on the FGT. You need to configure L3 for this at the parent, say 'port 1' interface. Then all the other VLAN subinterfaces under the parent 'port 1' interface. You obviously need to create a set of policies to allow access between specific combinations of VLANs.

 

emnoc
Esteemed Contributor III

OP so the juniper cfg looks okay 

 

Q1: is the fgt going to be native vlan-id 200? If yes just configured the physical port as-is and assign the /30

 

Afterwards check the juniper EX

 

# example using ge-0/0/0

 

  show vlan 200

  show interface ge-0/0/1 brief

  show ethernet table interface ge-0/0/1

 

 

 

Ken Felix

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Labels
Top Kudoed Authors