Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Dipen
New Contributor III

Transparent Mode - On Trunk (VLAN Tagged) Link

Is it possible to use Fortigate in Transparent Mode between two Switches which are connected via a Trunk Link (VLAN Tagged Link). I tried this but its blocking the traffic even with "ANY-ANY-ANY" policies created in either direction. We are facing this issue at 2 locations which are connected via L2 Radio Links.

Ahead of the Threat. FCNSA v5 / FCNSP v5

Fortigate 1000C / 1000D / 1500D

 

Ahead of the Threat. FCNSA v5 / FCNSP v5 Fortigate 1000C / 1000D / 1500D
1 REPLY 1
emnoc
Esteemed Contributor III

You need to reate subint and policies for  these interfaces;

 

config system interface   edit VLAN10IN    set type vlan    set interface port1    set vlanid 10  next   edit VLAN100OUT   set type vlan   set interface port2   set vlanid 10  next

 

    edit VLAN11IN    set type vlan    set interface port1    set vlanid 11  next   edit VLAN11OUT   set type vlan   set interface port2   set vlanid 11  next   And then craft policies using the interface definitions between in & out;   config firewall policy  edit 0   set srcintf VLAN10IN   set srcaddr all   set dstintf VLAN10OUT   set dstaddr all   set action accept   set schedule always   set service "HTTPS" "SSH" "DNS" end  

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Labels
Top Kudoed Authors