Can I delete "lan" Hardware Switch in 40F

[johnlloyd_13]

hi,

just wondering if i can delete the "lan" hardware switch in a fortigate 40F?

can't seem to delete it even when it's disabled.

i'm trying to do this setup:

WAN: internet/ISP

A: HA

port 1: MGMT (out of band)

port 2 and 3: 802.3AD aggregate/Port-Channel to switch

the port-channel interface (ports 2 and 3) will be my "inside" interface with a private layer 3 IP.

is this scenario possible? appreciate your advise.

[rmreddy]

Hi John,

Make sure there are no references for the hardware interface while deleting.

However, share the error you are getting while deleting the interface.

WAN: internet/ISP

A: HA

port 1: MGMT (out of band)

port 2 and 3: 802.3AD aggregate/Port-Channel to switch

the port-channel interface (ports 2 and 3) will be my "inside" interface with a private layer 3 IP.

The above scenario is possible.

[johnlloyd_13]

hi,

i can't remove "lan2" in the "lan" hardware switch.

getting a "this field is required" under the interface member.

originally lan2 and lan3 were added here.

how can i remove lan2 and delete the "lan" hardware switch interface?

[Julien87 · Accepted solution]

Hi,

if you have not reference, you can delete the hardware switch from list interface. The interface lan2 will come back in list interface. You can not have a hardware switch without an interface.

Cdlt

[johnlloyd_13]

hi,

i saw a default source NAT firewall policy.

changed source interface to my new portchannel inside interface.

the "delete" option was available for the lan hardware switch (lan2).

[herringbur]

I discovered a standard source NAT firewall policy. 

https://community.fortinet.com/t5/Support-Forum/Can-I-delete-quot-lan-quot-Hardware-Switch-in-40F/td... rainbow obby