Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ipranger
Contributor

[solved] Combine internal Interface with wifi, how can i do this?

Hi, I have a Fortigate 60C Wifi. i will combine the internal Interface with the wifiinterface to one Interface. I need this, because over the subnets does broadcast not work (avahi, bonjour, mediaserver...). And IPV6 has problem with the hostname, because the fortigate does not support IPV6mobile. How i can combine these two interfaces? Greetings ipranger

Fortigate 60E v7.x (GA)

Fortigate 60E v7.x (GA)
12 REPLIES 12
JSN
New Contributor

try this, config system switch-interface edit YOUR_COMBINE_INTERFACE_NAME set member internal wifi set vdom " root" end *don' t forget set interface ip address and netmask for switch-interface
ipranger
Contributor

This sounds good, but how i can to this? I ' ve add " internal" and " wifi" as independently interface. Ok, i added IPV6 route adv, DNSservice and DHCP, firewallrules, ... So can i add these two interfaces to the softwareswitch without to turn off the hole network? Do i need vdom? http://help.fortinet.com/fos50hlp/50/index.html#page/FortiOS%25205.0%2520Help/VDOM-Intro.105.09.html#ww1428259 It' s not enabled. Greetings ipranger

Fortigate 60E v7.x (GA)

Fortigate 60E v7.x (GA)
JSN
New Contributor

you don' t need vdom in this case but still need set SW-interface vdom as default " root" . soft-SW interface will check if the interface you are trying to add-in status are using or not. I suggest just create new wifi interface and add the physical port which you are not using(e.g. DMZ port) to SW-interface and then switch cable from internal to DMZ.
ipranger
Contributor

Hi, I have deleted all from wifi, but i can' t see this wifiinterface in selection for softwareswitcht. I have a problem to add some physical interfaces. I can' t! I don' t know why. I have another 4 interfaces. I pluged in a cable to the switch, but the interface don' t comes up. Why i can' t add some physicals interfaces to the fortigate? What i' am doing wrong? Greetings IPranger

Fortigate 60E v7.x (GA)

Fortigate 60E v7.x (GA)
JSN
New Contributor

FortiOS will prevent interface are using by other configuration, if currently other configuration like firewall policy have one entry are relate to this interface, system will not allow to add this interface to SW interface. you can delete relate configuration to release the interface. for wifi interface please check if interface currently using by 1.any wtp-profile 2.firewall policy 3.dhcp server 4.check GUI system -> network -> interface page " Ref." column see if number are not zero, if not please click the number and see what relate configuration currently using wifi interface. same as physical interface, please check if interface currently using by 1.firewall policy 2.dhcp server 3.check GUI system -> network -> interface page " Ref." column see if number are not zero, if not please click the number and see what relate configuration currently using wifi interface. what version your fgt running? (you can check it from GUI system -> dashboard -> status page -> system information)
ipranger
Contributor

Ok, i have done this from DMZ. But since that the DHCPserver give not always a default gateway. For example when you boot some machine, you must connect more then once to the net to get an gateway... have I done something wrong? Here is my configuration:
 .......
 end
     next
     edit " modem" 
         set vdom " root" 
         set mode pppoe
         set type physical
         set defaultgw enable
     next
     edit " ssl.root" 
         set vdom " root" 
         set type tunnel
         set alias " sslvpn tunnel interface" 
     next
     edit " mesh.root" 
         set vdom " root" 
         set type vap-switch
     next
     edit " internal" 
         set vdom " root" 
     next
     edit " wlan" 
         set vdom " root" 
         set description " internes Funknetzwerk" 
     next
     edit " corenet" 
         set vdom " root" 
         set ip 192.168.1.254 255.255.255.0
         set allowaccess ping https ssh
         set type switch
             config ipv6
                 set ip6-address 2001:570:1e0b:568::1/64
                 set ip6-allowaccess ping https ssh
                 set ip6-send-adv enable
                     config ip6-prefix-list
                         edit 2001:570:1e0b:568::/64
                             set autonomous-flag enable
                             set onlink-flag enable
                             set preferred-life-time 309600
                         next
                     end
             end
     next
     edit " HE_ip6_broker" 
         set vdom " root" 
         set ip 0.0.0.0 255.255.255.255
         set type tunnel
             config ipv6
                 set ip6-allowaccess ping https
             end
         set interface " wan1" 
     next
 end
 
And the DHCPserver config
 config system dhcp server
     edit 3
         set auto-configuration disable
         set default-gateway 10.10.10.254
         set interface " dmz" 
             config ip-range
                 edit 1
                     set end-ip 10.10.10.50
                     set start-ip 10.10.10.1
                 next
             end
         set lease-time 86400
         set netmask 255.255.255.0
             config reserved-address
                 edit 1
                     set ip 10.10.10.2
                     set mac 52:54:00:68:35:2c
                 next
                 edit 2
                     set ip 10.10.10.1
                     set mac 52:54:00:6d:04:6f
                 next
                 edit 3
                     set ip 10.10.10.4
                     set mac ea:bf:7f:4e:ce:8c
                 next
             end
         set dns-server1 10.10.10.254
         set dns-server2 8.8.8.8
     next
     edit 2
         set auto-configuration disable
         set default-gateway 192.168.1.254
         set interface " corenet" 
             config ip-range
                 edit 1
                     set end-ip 192.168.1.150
                     set start-ip 192.168.1.53
                 next
             end
         set lease-time 86400
         set netmask 255.255.255.0
             config reserved-address
                 edit 1
                     set ip 192.168.1.61
                     set mac 00:14:38:d7:bf:b3
                 next
                 edit 2
                     set ip 192.168.1.56
                     set mac 52:54:00:ca:79:ee
                 next
             end
         set dns-server1 192.168.1.254
         set dns-server2 8.8.8.8
     next
 end
 
Greetings

Fortigate 60E v7.x (GA)

Fortigate 60E v7.x (GA)
JSN
New Contributor

DHCP server not always give a default gateway. I guess you have other dhcp server running on your network which may connect to your interface " internal" . please check your dhcp server configuration are correct and turn off other dhcp server if possible. config system dhcp server edit 1 set default-gateway X.X.X.X set interface " corenet" config ip-range edit 1 set end-ip X.X.X.X set start-ip X.X.X.X next end set netmask X.X.X.X set dns-server1 X.X.X.X next
Dave_Hall
Honored Contributor

I' m going to assume you have something similar to the following in your config... config wireless-controller vap edit " wlan" set vdom " root" set ssid " wifi" set passphrase ENC password next end config system switch-interface edit " corenet" set member " internal" " wifi" set vdom " root" next end

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
ipranger
Contributor

config wireless-controller vap edit " mesh.root" set vdom " root" set mesh-backhaul enable set ssid " fortinet.mesh.root" set passphrase ENC blablabla next edit " wlan" set vdom " root" set ssid " supertux" set encrypt TKIP-AES set passphrase ENC blablabla next end config system switch-interface edit " corenet" set member " wlan" " internal" set vdom " root" next end

Fortigate 60E v7.x (GA)

Fortigate 60E v7.x (GA)
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors