Hi Experts,
I need to mirror my WAN traffic. I have two FG-201F v.7.2.5 in an active-passice cluster here.
WAN1 is in use as a Physical interface right now, handling our WAN Traffic.
Is it possible to create the SPAN configuration without causing a downtime?
And, can I have a VLAN Switch (I read this is the new name for a hardware switch?) as my WAN interface then?
I fear I'll need to change a lot of configuration (routes, ipsec, firewall rules) if I change the WAN interface to a switch.
Thanks for your input! :)
Hi,
Correct, SPAN port can be configured as a part of a switch interface.
Switch interface as any other one can be used as a WAN interface, but you will have to redo the entire configuration and probably the design of the connections.
Regards,
User | Count |
---|---|
1883 | |
1141 | |
769 | |
447 | |
277 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.