Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Tony79
New Contributor

How to switch defined vlan on Fortilink interface with vxlan

Hello,

 

I need some help in the following topic, I am note able to solve to mix external end internal vlans into Fortilink.

 

There is a FortiGate connected to 8 FortiSwitches via FortiLink interfaces. VLANs and subnets created on the FortiLink can be used on the switches without any issues. However, I need to be able to forward a VLAN arriving in a VXLAN to a specific FortiSwitch port.

fortilink_vlans.png

 

I can pass the incoming VXLAN as a trunk through a software switch to a manually configured switch without FortiLink, and I can use the VLANs. However, in this case, I lose the switch controller functionality, or I have to establish a separate physical connection.

 

I would like to request assistance on how to switch a VLAN within a VXLAN to VLANs defined on FortiLink, or how to forward all tagged VLANs existing within the VXLAN to the switches via FortiLink.

 

Thank you fro your help in advance.

 

Regards,

Antal

 

 

5 REPLIES 5
Jean-Philippe_P
Moderator
Moderator

Hello Tony79, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

 

Thanks, 

Jean-Philippe - Fortinet Community Team
Jean-Philippe_P
Moderator
Moderator

Hello,

 

We are still looking for an answer to your question.

 

We will come back to you ASAP.

 

Thanks,

Jean-Philippe - Fortinet Community Team
funkylicious
SuperUser
SuperUser

i think that as described in this article, https://community.fortinet.com/t5/FortiGate/Technical-Tip-VXLAN-over-IPsec-for-multiple-VLANs-using-... , you would need to do the mapping of vni / vlan interface on the switch interface accordingly.

"jack of all trades, master of none"
"jack of all trades, master of none"
Tony79
New Contributor

Thank you for your help. I have problem with this solution, that I cannot add vlan on Fortilink interface to the Software switch.

FPatrik
Staff
Staff

Hi Tony79,

 

We have an official article on LAN extensions between FortiGates. 

 

https://docs.fortinet.com/document/fortigate/7.6.3/administration-guide/097658/example-gui-configura...

 

As for using the software switch, you have to make sure the VLAN you add to it, has no other references at all - no IP address, no DHCP server etc. 

 

https://docs.fortinet.com/index.php/document/fortigate/7.6.0/administration-guide/277799/software-sw...

Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors