[FortiManager] No option to Block Intra VLAN Traffic in Switch Manager

[JoV]

Hi,

I would like to manage my switches from the FMG but many options are lacking, especially the "Block Intra-VLAN traffic". Same for SSIDs and "Block Intra-SSID traffic". How to enable these from the FMG ?

Thank you.

[asrour · Accepted solution]

hi @JoV 

FortiSwitch Manager -> Template Objects -> FortiSwitch Vlans , edit the vlan and in advanced ipv4 settings search for "switch-controller-access-vlan"

enable to allow traffic only to and from the FortiGate and to block FortiSwitch port-to-port traffic on the specified VLAN

https://docs.fortinet.com/document/fortiswitch/6.4.2/devices-managed-by-fortios/985221/fortiswitch-f...

Let me know if that helps,

Thanks

[JoV]

Thank you Asrour,

One last question, I don't see any explanations of all these advanced ipv4 options in the FortiManager Admin Guide. Is there any document detailing all these advanced options ? (same for SSIDs). This is especially annoying considering the same options in FortiGate have a different name (for instance, Block Intra-VLAN traffic VS switch-controller-access-vlan).

Thanks.

[asrour]

Hi @JoV 

The FortiManager admin guide will show you the main configurations of the switch

Managed FortiSwitches | FortiManager 7.4.3 | Fortinet Document Library

The advanced configurations are in the Switch admin guide

FortiSwitch features configuration | FortiSwitch 6.4.2 | Fortinet Document Library

Thank You!