Physical & VLAN interface on Fortigate Firewalls with VDOMs configured

[pratik29889]

Hi All,

I am new to Fortigate firewalls and I am wondering if someone of you can help me with a query.

The physical interface is in a "root" VDOM and VLAN interfcae is in a "abc" VDOM. When the traffic leaves VDOM "abc" it goes directly to internet and vice versa, only the physical interfaces are in root vdom. So will need inter vdom routing between vdom "root" and "abc" ?

Appreciate your commets, Thanks !

[Toshi_Esumi · Accepted solution]

You don't need anything special to use a VLAN subinterface at a different vdom from the vdom that has its parent interface.

[pratik29889]

Thanks mate 

[lobstercreed]

I think the answer depends on what interfaces it must traverse and what VDOM they are in.  You said the VLAN interface is in "abc" VDOM but that only accounts for one interface.  You said the traffic is headed to the internet, but out what interface?  Is that interface also in VDOM "abc"?

[pratik29889]

Yes all the interfaces are in vdom "abc" and all the interfaces are VLAN imterfaces.

Only thing is that the physical interfaces are in "root" vdom