Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Sas
New Contributor

FG-61E, VLANs, Routing Beetwen VLANs

Hello.

 

I have FG-61E FW. On the internal interface:

1) ip address - 192.168.31.1 (it is a Gateway for that LAN)

2) Net mask - 255.255.255.0

 

I need to set up VLAN, for example, 32. I also have 2 HPE layer 3 switches - 32 VLAN, ip routing enabled.

I found that instruction: https://cookbook.fortinet.com/using-zones-to-simplify-firewall-policies-56/

Option Block intra-zone traffic is disabled, because i need vlan routing.

But, it does not work fully. These is ping on 32 VLAN on fortinet FW, but there is no ping to internal interface (how I understand - this interface refers to Vlan 1) on FW and there is no internet. I created Policy to VLAN 32 Zone, how in video shows.

Ok. I replace FG-61E to Cisco router. Configure Cisco - and its work fine. But, I need FG-61E.

What I must do to enable VLAN routing on FG-61E?

 

Thank you.

 

 

1 REPLY 1
ede_pfau
SuperUser
SuperUser

A VLAN is a virtual interface in FortiOS. For any traffic from a VLAN to some other LAN segment, you need a policy.

Check that there is a policy for each direction you intend.

 

Next, why use a zone here at all? Why not just single (virtual) interfaces?

Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors