I have a FGT-600F cluster running 7.0.14. On it I have two vdoms, one with a VLAN interface on an X physical interface, and one with a EMAC-VLAN on the other vdom.
The two vdoms cannot communicate with each other via these interfaces.
Configuration is as so:
config global
config system interfaces
edit "x1"
set vdom "root"
set status down
set type physical
set snmp-index 27
set speed 10000full
next
edit "Transit-E-2398"
set vdom "Edge"
set ip 99.99.99.1 255.255.255.240
set allowaccess ping
set snmp-index 146
set interface "x1"
set vlanid 2398
next
edit "Transit-G-2398"
set vdom "Gridway-436"
set ip 99.99.99.2 255.255.255.240
set allowaccess ping
set type emac-vlan
set snmp-index 147
set interface "Transit-E-2398"
next
end
The X interface is up and passing traffic to other VLANs in each vdoms (this is the only VLAN I am attempting to share).
Both vdoms can ping an external IP address on the same vlan, 99.99.99.6, and that address can ping both vdoms on this vlan.
Neither vdom has the mac address of the partner interface in its arp table, but both have the mac address of the external system.
As you can probably tell, I'm trying to route traffic between these two vdoms.
What have I done wrong?
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
A caveat to take under consideration is that traffic that are going between emac-vlan interfaces that are based on the same physical (or vlan) interface are not NPU accelerated. Ini a nutshell, if you are trying to send traffic between two VDOMs that are using the same interface that their emacvlan is based on, it will not be hardware accelerated by NPU. The workaround to this is to use npu vdom-link.
Interesting. Do you know if the inter-vdom links are accelerated?
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1645 | |
1070 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.