Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
sriinuvas
New Contributor II

VLAN based configuration

Hi All, 

 

I hope this email finds you well.

I am writing to request your assistance with configuring multiple VLANs on our network. Below are the details of the configuration we need:

  1. VLAN Configuration on Firewall LAN Port:

    • We need to configure two VLANs on the LAN port of our firewall, each with a different IP address.
  2. DHCP Configuration:

    • Enable DHCP for both VLANs to ensure proper IP address allocation.
  3. L2 Switch Configuration:

    • We have an L2 switch that needs to be configured under the firewall LAN.

Could you please provide guidance or support on how to proceed with these configurations? Any documentation or step-by-step instructions would be greatly appreciated.

Thank you for your assistance.

 

 

Srinivas
Srinivas
5 REPLIES 5
AEK
SuperUser
SuperUser

Hi Srinivas

Here how you can create a VLAN interface and set DHCP server on it.

https://docs.fortinet.com/document/fortigate/7.0.0/ngfw-deployment/589143/vlans

AEK
AEK
sriinuvas
New Contributor II

Hi AEK,

 

Thanks for your inputs, and I Cisco 2960 (L2) switch and Ruckus access points.

So, i want connect the cisco 2960 switch under firewall lan port (VLAN based), 

Means switch port uplink will be trunk and other port which is connected to access point that is also trunk. 

under access points, i will create two SSIDd and each SSID will assign separate vlan.

please let me know, will it fine?

 

 

Srinivas
Srinivas
AEK

Yes it looks fine.

AEK
AEK
sriinuvas
New Contributor II

Thanks AKE, I created trunk port, where the Access Point is connected.
The it is starts working.

 

And another option is, SSID is single and multiple VLANs
Means, all users will connect to same SSID, but user1 will get 10.10.10.x series and user2 will get 10.10.20.x series.
here we created local accounts with MAC and user based authentication.

Please can you suggest on this.

Srinivas
Srinivas
AEK

Here you need RADIUS server that will assign VLAN according to the authenticated user/group.

AEK
AEK
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors