Fortiswitch help

[vinceneil666]

Hi,

Are there som general hints/tips regarding the Fortiswitch that anyone wanna share ?

We have a setup with a fortigate and 6 fortiswitches. We have em setup in lab and all is fine, but as soon as I drag them to our customer site we get strange issues.

As an example, we connected a SAN and is unable to ping it from laptops connected in same vlan. But we do get ping from the local firewall ? .. All in all we se a lot of internal access not working - on the same vlans.

Are there anything special we need to think about besides general trunking/vlan/fw-rules ?

[M_M_SW]

What OS ver do you use? If it is 6.0.4 Suggest you check vlan setting in GUI Check Access VLAN option isn’t disable or not

Its effect is to make the IP in the same VLAN cannot communicate with each other.

   

[Seppel]

Depending on the availability you are looking for, it may be worthwhile to build a fortigate ha. The whole vlan handling happens on the fortigate. if that does not work, you will no longer have communication between the vlans. which is also important in 2 distribution switches to properly implement mclag. most configuration settings are backed up with fortigate backup, but not all. therefore, it makes sense to additionally save the configuration of the switches separately.