vLAN as "untagged" and fortilink as "tagged"?

[Dadda]

Hi. I'm new to this so please bare with me...

So, I have a small lab-setup at home with a FortiGate 70F and a FortiSwitch 108F-POE. The FW is located in the livingroom where my incomming internet is, and the SW is located in my home office. Between the FW and the SW is a small office-SW (located on the 2nd floor) with no support for vLAN. If I connect the fortilink interface on the FW to the fortilink interface on the fortiSW, everything works as expected even over the officeSW. However, the other devices connected to the office-SW then doesn't work since they don't get a vLAN (obviously).

My question is if it's possible to send BOTH the vLAN AND the fortilink traffic, with the vLAN as "primary" (or "untagged") over the same FW-interface so that I can use a single TP-cable.

Is this at all possible?

[HarshChavda]

Hello @Dadda ,

can you refer this document: https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-a-VLAN-tagged-interface-802-...

[Dadda]

Thanks @HarshChavda,

I did some research by my self and hopefully I can now explain a little bit better what I'm trying to achive. What I'm after is that I want to connect my FortiGate to my FortiSwitch with FortiLink with a managed HP Layer 2 switch in between. Like this:

FortiGate --> HP Layer 2 Switch --> FortiSwitch
    |                                    ^

     ---------- Fortilink ----------------

This setup actually works fine when using an unmanaged switch from Netgear. The reason that I want to use a managed Layer 2 switch in between is that I want to take out certain vLANs from the HP-switch for devices connected to that.

I've found some documentation regarding similar setups, thoug these require a layer 3 switch/router or that there's a Fortiswitch on each side of the layer 2 switch.

Is this possible at all?

//Daniel

[vbandha]

Hi @Dadda ,

Yes, this is possible.

Here is another forum post with a similar query:

https://community.fortinet.com/t5/Support-Forum/FortiLink-through-3rd-party-L2-switch/m-p/297694

Regards,

Varun