SVI and Sub-Interface Configuration Using GUI

[Network_Engineer]

Q1 How do you configure a switch virtual interface and
do vlan tagging on the firewall ports using GUI?

Q2 If it is possible, pls do guide me and advice if I am supposed
to use a software switch or a hardware switch?

Q3 How come there can be 3 ip addresses for the physical
and virtual interfaces? Ip addresses should only be on the physical
or virtual interface, not both. (there are one physical and 2 virtual interfaces)

Q4 How do you configure an interface and assign sub-interfaces to it
using GUI?

[akristof]

Hi,

You don't need to use software switch. Usage for software switch is in specific scenarios. For example, you want to have your LAN and SSID working as a one interface. If you want to have Vlan, you create VLAN same as in guide and then firewall policy to allow traffic between interfaces.

[Toshi_Esumi · Accepted solution]

A1. Again no SVI. No way with FortiGates. FGTs are not "L2/L3 switch-router".

Toshi

[Network_Engineer]

In the end I had to configure a physical interface with ip addres, enable dhcp and then put my own switch as the downlink to solve the issue.