Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
HT_JDC
New Contributor II

2 different LAN subnets within Fortigate

Dear Experts,

 

By 2 separate vlan switches, can we have 2 different LAN subnets?

Here is an example.

 

"internal" (original vlan switch) has physical ports 1-3. 192.168.10.1/24

New vlan switch called "switch2' has physical ports 4-5. 172.16.1.1/24

Both "internal" and "switch2" have routes to wan.

There is also route between "internal" and "switch2".

 

I tried, however, I cannot realize it. The device is Fortigate 60F.

 

Any comments would be appreciated.

 

Best regards,

 

 

2 REPLIES 2
HT_JDC
New Contributor II

Sorry, my mistake and I should have clarified more.

Some of them works now.

 

'internal' has SD-WAN route. The following route cannot be realized.

'switch2' --> 'internal' --> SD-WAN.

 

Any comments would be appreciated.

 

Best regards,

 

 

Toshi_Esumi
SuperUser
SuperUser

Both "internal:192.168.10.0/24" and "switch2:172.16.1.0/24" are on the same FGT(router) and the same routing-table. If you have doubt, you can run "get router info routing-table all" in CLI to see them.
Therefore, you need to have a NAT policy "switch2" -> SD-WAN in addition to "switch2"<->"internal", which you must have set up already. Again the (connected) routes are already there. 

Toshi

Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors