Route traffic using Fortiswitch, but witouth Inter VLAN Routing

[fortimaster]

Hi all ¡¡

I want to configure 2 stand alone fortiswitches, forming an MCLAG with ICL. Afther that, I want to define 3 VLANS, each one with a layer 3 address. For example:

192.168.1.1/24 Vlan 1

192.168.2.1/24 Vlan 2

192.168.3.1/24 Vlan 3

The fortiswitch will be configured with default route 0.0.0.0 0.0.0.0 192.168.1.2 (firewall) connected to VLAN 1.

Finally, I want these 3 Vlans can route traffic (using the static route configured) but , I don't want these 3 Vlans can route traffic between them witouth previously leave Fortiswitch.

For example, we have a server1 connected to VLAN 1, with IP 192.168.1.200/24 and default gateway 192.168.1.1 that wants to connect with server2 192.168.3.200/24 connected to Vlan 3 with default gateway 192.168.3.1.

The flow traffic that I'm looking for Layer 3 is:  SERVER1 --> FORTISWITCH --> ROUTER -->FORTISWITCH-->SERVER2

I have read about offload IP options, but Im not sure wether enable or disable it, the layer 3 of the switch could work this way. Maybe, another option to ge it could be using VRF ...

Thanks ¡¡¡

[xshkurti]

You can check below links for more information:

Configuring layer-3 routing on FortiSwitch units | FortiSwitch Manager 7.2.4 | Fortinet Document Lib...

Layer-3 interfaces | FortiSwitch 6.4.2 | Fortinet Document Library

[fortimaster]

Thanks for your help. It's not an usual scenary, I think the best way to achieve this will be using VRFs.