SPAN (Port Mirror)

[ITGEMINI]

Unable to create a span session under a vlan switch in fortios 7.2.8

[Toshi_Esumi]

Please share us your config under "config system virtual-switch"(hard-switch) or "config system switch-interface"(soft-switch), whichever you configured.

Toshi

[ITGEMINI]

config system virtual-switch
edit "lan"
set physical-switch "sw0"
config port
edit "port1"
next
edit "port8"
next
end
next
end

[Toshi_Esumi]

You need to enable SPAN on the virtual-switch.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-SPAN-Port-Mirroring-using-ports-associated...

Toshi

[ITGEMINI]

it tried here is the command and response

min-201G (virtual-switch) # edit "lan"

Admin-201G (lan) # set span enable

command parse error before 'span'
Command fail. Return code -61

Admin-201G (lan) #

[Toshi_Esumi]

Maybe G series has different command or not supported yet? Does anyone else know?

Toshi

[ITGEMINI]

it appears that through the gui it will not allow span on vlan switches only.

[Toshi_Esumi]

The 7.2.10 CLI referece says "* This parameter may not exist in some models." 

https://docs.fortinet.com/document/fortigate/7.2.10/cli-reference/101854390/config-system-virtual-sw...

Toshi

[ITGEMINI]

it works under a virtual switch but not under the vlan switch.

[Toshi_Esumi]

You're talking about GUI, right? Can you check the CLI under config sys virtual-switch when you configured it in GUI under VLAN switch?
The CLI part should be the same between VLAN switch and hard-switch (virtual-switch).

Toshi