Switchport access in FortiGate

[fjulianom]

Hi guys,

My customer wants to replace his Cisco router by a FortiGate. It has many ports as trunks allowing some VLANs, and I know I can easily accomplish this in the FortiGate. But it has also one port as switchport in access mode associated to one VLAN, like this:

interface GigabitEthernet0/1/0  switchport access vlan 88  no ip address

interface Vlan88

 ip address 10.8.8.1 255.255.255.0

The FortiGate will be operating in NAT mode. How can I create a FortiGate port in access mode associated to one VLAN as above?

Regards,

Julián

[sw2090]

hm I remember this from dell switches. Ist it the same on CIsco?

On Dell Switch access port simply means it is untagged in the named vlan (here vid 88). A switch Port indeed doesn't have an Ip. The switch may have an ip in that vlan subnet.

FortiOS imo cannot do this. It can have vlan interfaces that can have one (or more) ips but you cannot chose between the vlan moduses like tagged,untagged,forbid,etc. Afair vlan interfaces on fortios will only take tagged packets and will ignore packets with non matching vlan tag (or no vlan tag at all) which equals to the port being tagged in that vlan (and set to no or forbid in all others) on a switch.