Configure WAN2 and DMZ as software switch port

[krissilon]

Hi,

I have a fortiwifi 60D running 5.4.1 and I am missing two ports to complete my setup.  As I have only one isp provider and no web server, I would like to configure WAN2 and DMZ ports as normal switch ports like the others (in software switch).  Can anyone point me in the right direction how to do this the most easy way as I am a fortigate newbie ?

Tks,

[Toshi_Esumi]

I regularly don't use GUI but since you said you were new to FG that's probably you want to use. First, 5.4 introduced interface role, like WAN for WAN1 and 2, and DMZ for DMZ only for GUI sake, so you need to change them to "LAN" to be able to bind them to internal interface. You probably need to remove pre-assigned IP from DMZ port too but need to put 0.0.0.0/0.0.0.0 in (that's why I don't like GUI).

Second, you have to remove all config attached to internal interface, which is a hard-switch interface, including IP and DHCP server. Also even with the default config, there is one policy exist using the internal interface. You need to remove that too.

Then you should be able to create a new softswitch interface and select those three interfaces.

[krissilon]

Thank you Toshi for helping out a newbie.  Will hopefully have some time this weekend to give it a try - I will keep you posted on the outcome.