Separate networks on each port

[mk2mark]

Hey guys,

Totally new to Fortinet devices so fair to assume a low level of knowledge. Is it possible with a 60F to have (7) networks on each port of the device that are isolated from each other, but all tied to the WAN/internet port? 

Thanks!

[Markus]

Hi and welcome to the Forums. In short, yes. But you have to break up the hard switch(es). In the default conf, a/b are linked with fortilink and 1-5 with internal. To use all ports as it's own, these switches must be free'ed up. https://forum.fortinet.com/tm.aspx?m=149405 https://docs.fortinet.com/document/fortigate/6.4.2/administration-guide/100999/hardware-switch

[mk2mark]

Thanks, that's helpful.

[SJFriedl]

Moving away from the hardware switch would certainly do this, but I did that originally and wish I hadn't. Configuring the entire hardware switch as a single interface with a VLAN trunk would make it easy to expand this in the future.  If you're doing a VLAN environment, that would be straightforward.