configure one of the LAN port of 60D as WAN port

[saadshamim]

hello. i just wanted to know whether we can configure one of the LAN port of 60D as WAN port?

[kcuerrier_FTNT]

Yes,

Any port on the 60D can be used for LAN/WAN/DMZ functions.

Depending on the firmware version currently on your unit will depend on the process required.

Ultimately, you will need to remove the specific port from the LAN switch configuration.

If you are in a 5.2.x firmware you can simply enter the interface configuration and remove the interface you would like to use as a WAN connection.

If you are in a 5.0.x firmware, you will need to change the operation mode to "interface mode" from "switch mode"

This is slightly more complex as you cannot make this change if there is anything bound to the "LAN" switch interface.

Once all dependencies have been removed, simply go to the interface configuration menu and right click on "LAN" or "Internal" and select change mode. This will require a reboot of the unit.

Hope this helps

[Itguy]

Won't happen. 60D has bonded WAN ports. You can convert it from Switch to Interface mode, and back and forth, but you cannot identify existing LAN ports as a WAN.  This will enable you to have separate settings and configurations for every network port.

However the 80D you can do this as they are simply labeled Port1-Port4 and you bond those ports with whatever interface you want. Which is why I actually prefer the 80D over most Fortigates on the low end spectrum. 

[ede_pfau]

@Itguy: I don't understand what you mean. What is 'bonded'? What do you mean with 'you cannot identify...' - you cannot 'use'? That would be wrong.

A port is a port is a port. How you use it is configuration dependent. For instance, you can enable PPPoE on any port to use it in a typical WAN setup. The port labels on the case and the port names are there for convenience only.

If you want to assign a new name to a port, for instance to use 'wan3' instead of 'internal3', create a zone named 'wan3' and make 'internal3' the only member of that zone. From that point on you will only deal with 'wan3' in policies, routes etc.

The only obstacle mentioned by @kcuerrier is that the 'internal' ports are by default configured as ports of one switch and thus are not independent (you will only see ONE 'internal' or 'lan' port). Once you break up the switch you can use all of it's ports independently, for a DMZ or as (additional) WAN ports.

[m_metall]

Hello 

you can use this command to change port from lan to wan

config system interface               edit <port_name>               set role Wan