Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
MontanaMike
Contributor

Integrate Interface Question

I've got a cluster of 601Es running 7.4.7 that I need to move the internet port from port 1 (copper) to port 9 (sfp) and I was dreading doing it manually (delete policies, addresses, objects, then interface and then recreate everything on new interface) and noticed something "new" (to me) called Integrate Interface.  Does anyone have 1st hand experience in doing this?  Just wondering if there are any "gotcha's" or things I need to watch for.  Thanks in advance for anything tips, tricks or advice.

-Mike

-Mike
4 REPLIES 4
AEK
SuperUser
SuperUser

I used it many times.

https://docs.fortinet.com/document/fortigate/7.4.7/administration-guide/885870

For me it worked fine about 7 times out of 10.

When it doesn't work it just abort and shows error message at the final step but so far it has never caused any issue.

AEK
AEK
MontanaMike

Thanks for that information.  I've been using Fortinet products for over almost 20 years and have, for some reason, never had run into this.  Sounds like a huge time saver if it works as advertised.

-Mike

-Mike
AEK

Yes it is.

But I think the best practice is to put your interfaces inside zones, which is a huge time saver as well, when you want to change, move or add interfaces.

AEK
AEK
ChrisM589
New Contributor II

I have got two interfaces with different IPs (Obviously). We are using a secondary IP on one of them as a VPN connection to AWS. Critically.
When we have a failover and loose the primary route the interface goes down and traffic passes via the secondary interface and we loose the VPN tunnel.
If we migrated to SDWAN could we retain the IP address of the source of the tunnel in any way?

Just throwing this out there to see if anyone has any ideas.


Any comments welcome.
Chris.

 

Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors