fortiwifi 40F/ how to delete a port form the hardware switch LAN to set as a solo software switchLAN

[antoniocerasuolo]

Hi,

my lan hardware switch interface has 3 ports lan1,lan2,lan3.-> lan

these 3 ports are part of the main "internal lan"

how do i take lan1 out of the lan hardware switch and create a second hardware switch lets say lan_2 containing only the port lan1?

in this fashion i would then add lan_2 to a new internal interface lets say internal_2 ?

how can all of this be done? it seems impossible to find where to topke out lan1 from the hardware switch.

any help would be appreciated.

ciao,

Antonio

[funkylicious]

Hi,

In order to remove lan1 from the hardware switch, you would need to edit the interface and just click X next to the interface then click OK to save, as shown here, https://docs.fortinet.com/document/fortigate/7.6.1/administration-guide/100999/hardware-switch

[antoniocerasuolo]

it seems impossible because in the internal lan the members are :

-lan ( hardware lan)

-wifi

there is no interface that is a hardware lan that can be modified, I don't understand why?

is this clear?

can you help?

ciao,

Antonio

[funkylicious]

sounds kinda fishy.

can you share a screenshot of the interfaces on the GUI ?

[antoniocerasuolo]

hi,

I'm attaching the screenshots of the interface lists and of the specific internal interface

[funkylicious]

kinda strange that it doesnt show up in the GUI.

can you try via CLI ?

first of all, do a show system virtual-switch , to confirm that you 'see' it in CLI and that this has those 3 members, then you can try to delete lan1 from it.

config system virtual-switch
    edit "lan"
        config port
            delete lan1
        end
    next
end

[antoniocerasuolo]

ok thanks now that lan port is decoupled and free

should i create a hardware switch with that lan port or should I create a software switch? which is best do you suggest?

[funkylicious]

it really depends on how/what you need from it to do for you.

hardware/software switches are basically virtual switches each with it's pluses and minuses ( also described in the previous link ) , so you would need a couple of ports to be part of it and is best if you need those 2 ports/devices to be in the same L2 segment without using a physical switch to connect them.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Setup-comparison-between-FortiGate-Hardwar... 

[antoniocerasuolo]

hi,

do you know how i can create an SSID that can be part of the internal switch that i just created and therefore gets the same dhcp?

[funkylicious]

try following this guide as a starting point and adapting it to your needs, https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-add-SSID-interface-with-tunnel-mode...