vxlan bridge problem

[alitursun]

Hi,

There is a P2P line between our 2 locations. However, we put Fortigate firewall in between. (Data center and HQ)
I want to extend vlan 200 with VXLAN. (from DC to HQ)
There is vlan 200 on the data center  (DC) side. I want to extend this vlan DC to HQ. We use vlan 200 as wifi guest.
So we want to get Hotspot wifi IP from VLAN in Data center on HQ side.
DC side :10.100.100.254
HQ side :10.100.100.251
I made the definitions but it doesn't work.

The config of the 2 sides is as follows.

*****************
HQ_SITE
*****************
config system vxlan
edit "VXLAN_YK"
set vdom "root"
set type vxlan
set vni 200
set remote-ip "10.100.100.254"
set interface "wan1"
next
config system switch-interface
edit "vlan200"
set vdom "root"
set device-identification enable
set role lan
set snmp-index 24
set interface "internal3"
set vlanid 200
next
edit "vxlan200"
set vdom "root"
set device-identification enable
set role lan
set snmp-index 25
set interface "VXLAN_YK"
set vlanid 200
next
config system switch-interface
edit "SW"
set vdom "root"
set member "vlan200" "vxlan200"
set type switch
set intra-switch-policy implicit
set mac-ttl 300
set span disable
next

*****************
DC_SITE
*****************
config system vxlan
edit "VXLAN_YK"
set vdom "root"
set type vxlan
set interface "s1"
set vni 200
set remote-ip "10.100.100.251"
next
config system interface
edit "vlan200"
set vdom "root"
set device-identification enable
set role lan
set interface "port3"
set vlanid 200
next
edit "vxlan200"
set vdom "root"
set device-identification enable
set role lan
set interface "VXLAN_YK"
set vlanid 200
next
config system switch-interface
edit "SW"
set vdom "root"
set member "vlan200" "vxlan200"
set type switch
set intra-switch-policy implicit
next

[jintrah_FTNT]

Hi,

Please check the switch interfaces defined on HQ, please see https://community.fortinet.com/t5/FortiGate/Technical-Note-Virtual-Extensible-LAN-VXLAN-configuratio...

Best regards,

Jin

[alitursun]

Hi Jin,

I checked the link you gave earlier. but I didn't see any error.
Did you see an error in the config?

Could it be a version issue?
DC version :6.4.9
HQ version: 7.2.0

Best regards,

[jintrah_FTNT]

I see the configs have to be reviewed, but not any version issue.

best regards,

Jin