SUBNET

[kingpin]

help me guys im new with fortinet my question is i have existing router MIKROTIK i have 16 subnet all connected in one interface but planning all to transfer  in fortinet 200e the same configuration because some of my switch is not manage switch. how to config one interfaces with 16 subnet thanks 

[kingpin]

thanks for your reply. sir i can config this thru vlan but there's no other way to config. without vlan . because most of my switch is regular switch

[wearfear]

Create new interface and chose VLAN and attach it to your physical interface.

If you are running 16 subnets on the same L2 Domain, you really should think about doing something about it.

Mikrotik is very flexible and does everything that is possible, but it also does stuff that is REALLY bad practice which other providers usually block.

I think fortinet only supports 2 IP's.

[kingpin]

thanks for your reply. but i try 16 vlan in one interface working but my question is how to communicate each other because in policy need to config 1 by 1. do i need to make group or zone for my vlan??? thanks

[wearfear]

You will need to create the 16 vlans and attach it to the interface that you want.

Zones could be a good way to do it if you're never in the future gonna have to limit access between the vlans.

Since it's a statefull firewall. If you expect hosts to start sessions both ways you need to make 2 policies for each VLAN interface permitting your traffic.