[solved] Combine internal Interface with wifi, how can i do this?

[ipranger]

Hi, I have a Fortigate 60C Wifi. i will combine the internal Interface with the wifiinterface to one Interface. I need this, because over the subnets does broadcast not work (avahi, bonjour, mediaserver...). And IPV6 has problem with the hostname, because the fortigate does not support IPV6mobile. How i can combine these two interfaces? Greetings ipranger

[JSN]

try this, config system switch-interface edit YOUR_COMBINE_INTERFACE_NAME set member internal wifi set vdom " root" end *don' t forget set interface ip address and netmask for switch-interface

[ipranger]

This sounds good, but how i can to this? I ' ve add " internal" and " wifi" as independently interface. Ok, i added IPV6 route adv, DNSservice and DHCP, firewallrules, ... So can i add these two interfaces to the softwareswitch without to turn off the hole network? Do i need vdom? http://help.fortinet.com/fos50hlp/50/index.html#page/FortiOS%25205.0%2520Help/VDOM-Intro.105.09.html#ww1428259 It' s not enabled. Greetings ipranger

[JSN]

you don' t need vdom in this case but still need set SW-interface vdom as default " root" . soft-SW interface will check if the interface you are trying to add-in status are using or not. I suggest just create new wifi interface and add the physical port which you are not using(e.g. DMZ port) to SW-interface and then switch cable from internal to DMZ.

[ipranger]

Hi, I have deleted all from wifi, but i can' t see this wifiinterface in selection for softwareswitcht. I have a problem to add some physical interfaces. I can' t! I don' t know why. I have another 4 interfaces. I pluged in a cable to the switch, but the interface don' t comes up. Why i can' t add some physicals interfaces to the fortigate? What i' am doing wrong? Greetings IPranger

[JSN]

FortiOS will prevent interface are using by other configuration, if currently other configuration like firewall policy have one entry are relate to this interface, system will not allow to add this interface to SW interface. you can delete relate configuration to release the interface. for wifi interface please check if interface currently using by 1.any wtp-profile 2.firewall policy 3.dhcp server 4.check GUI system -> network -> interface page " Ref." column see if number are not zero, if not please click the number and see what relate configuration currently using wifi interface. same as physical interface, please check if interface currently using by 1.firewall policy 2.dhcp server 3.check GUI system -> network -> interface page " Ref." column see if number are not zero, if not please click the number and see what relate configuration currently using wifi interface. what version your fgt running? (you can check it from GUI system -> dashboard -> status page -> system information)

[ipranger]

Ok, i have done this from DMZ. But since that the DHCPserver give not always a default gateway. For example when you boot some machine, you must connect more then once to the net to get an gateway... have I done something wrong? Here is my configuration:

 .......
 end
     next
     edit " modem" 
         set vdom " root" 
         set mode pppoe
         set type physical
         set defaultgw enable
     next
     edit " ssl.root" 
         set vdom " root" 
         set type tunnel
         set alias " sslvpn tunnel interface" 
     next
     edit " mesh.root" 
         set vdom " root" 
         set type vap-switch
     next
     edit " internal" 
         set vdom " root" 
     next
     edit " wlan" 
         set vdom " root" 
         set description " internes Funknetzwerk" 
     next
     edit " corenet" 
         set vdom " root" 
         set ip 192.168.1.254 255.255.255.0
         set allowaccess ping https ssh
         set type switch
             config ipv6
                 set ip6-address 2001:570:1e0b:568::1/64
                 set ip6-allowaccess ping https ssh
                 set ip6-send-adv enable
                     config ip6-prefix-list
                         edit 2001:570:1e0b:568::/64
                             set autonomous-flag enable
                             set onlink-flag enable
                             set preferred-life-time 309600
                         next
                     end
             end
     next
     edit " HE_ip6_broker" 
         set vdom " root" 
         set ip 0.0.0.0 255.255.255.255
         set type tunnel
             config ipv6
                 set ip6-allowaccess ping https
             end
         set interface " wan1" 
     next
 end
 

And the DHCPserver config

 config system dhcp server
     edit 3
         set auto-configuration disable
         set default-gateway 10.10.10.254
         set interface " dmz" 
             config ip-range
                 edit 1
                     set end-ip 10.10.10.50
                     set start-ip 10.10.10.1
                 next
             end
         set lease-time 86400
         set netmask 255.255.255.0
             config reserved-address
                 edit 1
                     set ip 10.10.10.2
                     set mac 52:54:00:68:35:2c
                 next
                 edit 2
                     set ip 10.10.10.1
                     set mac 52:54:00:6d:04:6f
                 next
                 edit 3
                     set ip 10.10.10.4
                     set mac ea:bf:7f:4e:ce:8c
                 next
             end
         set dns-server1 10.10.10.254
         set dns-server2 8.8.8.8
     next
     edit 2
         set auto-configuration disable
         set default-gateway 192.168.1.254
         set interface " corenet" 
             config ip-range
                 edit 1
                     set end-ip 192.168.1.150
                     set start-ip 192.168.1.53
                 next
             end
         set lease-time 86400
         set netmask 255.255.255.0
             config reserved-address
                 edit 1
                     set ip 192.168.1.61
                     set mac 00:14:38:d7:bf:b3
                 next
                 edit 2
                     set ip 192.168.1.56
                     set mac 52:54:00:ca:79:ee
                 next
             end
         set dns-server1 192.168.1.254
         set dns-server2 8.8.8.8
     next
 end
 

Greetings

[JSN]

DHCP server not always give a default gateway. I guess you have other dhcp server running on your network which may connect to your interface " internal" . please check your dhcp server configuration are correct and turn off other dhcp server if possible. config system dhcp server edit 1 set default-gateway X.X.X.X set interface " corenet" config ip-range edit 1 set end-ip X.X.X.X set start-ip X.X.X.X next end set netmask X.X.X.X set dns-server1 X.X.X.X next

[Dave_Hall]

I' m going to assume you have something similar to the following in your config... config wireless-controller vap edit " wlan" set vdom " root" set ssid " wifi" set passphrase ENC password next end config system switch-interface edit " corenet" set member " internal" " wifi" set vdom " root" next end

[ipranger]

config wireless-controller vap edit " mesh.root" set vdom " root" set mesh-backhaul enable set ssid " fortinet.mesh.root" set passphrase ENC blablabla next edit " wlan" set vdom " root" set ssid " supertux" set encrypt TKIP-AES set passphrase ENC blablabla next end config system switch-interface edit " corenet" set member " wlan" " internal" set vdom " root" next end