Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
g_rayan
New Contributor

problème communication vlan

hi guys 

I create two interface vlan 300 between my switch and my fortigate 

and I have no answer ping between the two interfaces 

What I is the probleme in my configuration ?

my config

switch cisco

interface GigabitEthernet0/1 switchport access vlan 300 switchport mode access

interface Vlan300 ip address 80.45.28.253 255.255.255.252

 

fortigate 200A

edit "internal3" set vdom "root" set allowaccess ping https snmp http fgfm set type physical

edit "Vlan 300" set vdom "root" set ip 80.45.28.254 255.255.255.252 set allowaccess ping https snmp fgfm set interface "internal3" set vlanid 300

you know configuration examples ?

thank you for your help

 

 

4 REPLIES 4
emnoc
Esteemed Contributor III

will for starters you have one side  tagged ( 802.1q  ) and the cisco access mode.

 

 

Either change the  cisco to a trunk mode ( 802.1q )

 

 

config  term

  int gi 0/1

     no switchport access vlan 300

     switch mode trunk

     switch trunk allow vlan  300

 end

 

or remove the vlan interface and make the  FGT access mode.

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
g_rayan
New Contributor

hi 

when i type this commande "switch mode trunk" i nave this message

Switch(config-if)#switchport mode trunk Command rejected: An interface whose trunk encapsulation is "Auto" can not be configured to "trunk" mode. Switch(config-if)#

emnoc
Esteemed Contributor III

Depending on   cisco switch type you have to set the encapsulation also.

 

e.g  ( check the capabilities of the interface 1st )

 

show int  gi 0/1 cap

 

Now we can set the  trunk encapsulation

 

config term

 

  int gi 0/1

     switch trunk encapsulation 802.1q

    do copy runn start

end

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
g_rayan
New Contributor

it works now thanks

Labels
Top Kudoed Authors