I've been working with Fortigates for about 8 months and have an 100F I've been playing with in a lab and this is what I've been looking for and couldn't find any documentation on it. Thanks a million for the video....one thing to add for the newbies like myself, you will need to delete any reference to that lan or internal first before you can delete the switch.
The switch types are what I struggled with when I started with Fortinet so this tutorial was very useful, so thank you Fortiguru. If you have anything else you think would be useful for people to know on this then that would be really helpful. Thanks again. 🙂
Great video! The one thing that I seem to keep running into and forgetting how to deal with it more gracefully is this: One of those internal interfaces that are on the switch is connected to the LAN and has a static IP address. We need to remove it along with all the others. I know that I've done it but more often than not, I lose the LAN connection and have to recover from that!! How is it done more gracefully? Thanks Mike!!
Hi I have a fortigate 90D with like 14 ports I only use 1 or 2 ports and the rest are not being used at all. I have a separate switch for the DMZ and one for the internal network. Can you somehow configure the ports that are not use and segment them into 2 or 3 different switch so I can connect my internal and DMZ network to them and eliminate the 2 switches that I am currently using for internal and dmz ? Thank you
This was a useful video. I'm on a project to replace all of the FG at 70 branches and I've configured 2 hardware switches on the. Question... The physical switch (sw0) do you know how many a 100F can support? I'm configured 2 just to test, but was curious and can't seem to find any information on them and thr reason for confguring different ones.
Hello Fortinet Guru, I have a question related to the fortiClient VPN. Is it possible to connect to multiple different locations/offices/gateways at the same time? The scenario is we have one head office and multiple branch offices. All branches are connected to head office through IPSec tunnel. But we want our branches to communicate with each other as well (For file sharing).
Several models do not support hardware switch fabric. The best bet on those devices is to utilize FortiSwitches or to LAGG them down to a core switch of some sort.
Hi, Thanks for the video what is the difference in creating gui and cli?? I am trying to create from GUI but it was effecting on exisitng interfaces , do you think must do this from cli??
Looking to be able to conncect a handful of access switches into the fortigate without using a distribution switch. The access switches would have common vlans (e.g. staff, guest, student) on all of them, but only one gateway per vlan..so like sw1 connects to port 1 with vlan a,b,c and sw2 connects to port 2 with vlans a,b,c etc...I'm assuming hardware switch will work in this scenario?
Hardware switch will function just fine for what you are asking. All ports that are a member of that switch will pass the vlans that use that hardware switch as an interface.
Hi, can you please advice me how can i config span port on FG-3301E. actually i've FG datacernter and i wanna config span port in fortigate toward the Dark-race in order to collect the logs. appreciate your help
Hi, can you please advice me how can i config span port on FG-3301E. actually i've FG datacernter and i wanna config span port in fortigate toward the Dark-race in order to collect the logs. appreciate your help
I've been working with Fortigates for about 8 months and have an 100F I've been playing with in a lab and this is what I've been looking for and couldn't find any documentation on it.
Thanks a million for the video....one thing to add for the newbies like myself, you will need to delete any reference to that lan or internal first before you can delete the switch.
The switch types are what I struggled with when I started with Fortinet so this tutorial was very useful, so thank you Fortiguru. If you have anything else you think would be useful for people to know on this then that would be really helpful. Thanks again. 🙂
Wanted to thank you for your video. I was thrown into the fire on a project and this literally saved the day.
This is a great video, thank you for posting it.
I never knew you could add additional hardware switches to the FortiGate until I saw this!
It comes in handy all the time!
Great video! The one thing that I seem to keep running into and forgetting how to deal with it more gracefully is this:
One of those internal interfaces that are on the switch is connected to the LAN and has a static IP address.
We need to remove it along with all the others.
I know that I've done it but more often than not, I lose the LAN connection and have to recover from that!!
How is it done more gracefully?
Thanks Mike!!
Another simplified illustration thanks alot
Hi I have a fortigate 90D with like 14 ports I only use 1 or 2 ports and the rest are not being used at all. I have a separate switch for the DMZ and one for the internal network. Can you somehow configure the ports that are not use and segment them into 2 or 3 different switch so I can connect my internal and DMZ network to them and eliminate the 2 switches that I am currently using for internal and dmz ? Thank you
Thanks!
not working, says
intf internal is used
command_cli_delete:6722 delete table entry internal unset oper error ret=-23
Command fail. Return code -23
Nice.
Thank very much
This was a useful video. I'm on a project to replace all of the FG at 70 branches and I've configured 2 hardware switches on the.
Question... The physical switch (sw0) do you know how many a 100F can support? I'm configured 2 just to test, but was curious and can't seem to find any information on them and thr reason for confguring different ones.
Hey!! How can i delete an entry from interfaces - a software switch entry? Thanks
Hello Fortinet Guru, I have a question related to the fortiClient VPN. Is it possible to connect to multiple different locations/offices/gateways at the same time? The scenario is we have one head office and multiple branch offices. All branches are connected to head office through IPSec tunnel. But we want our branches to communicate with each other as well (For file sharing).
We don't want to create IPSec tunnel between branches and the requirement is one user can communicate to multiple branches at the same time.
can these hardware switch port be tagged with different vlans? i could not see option for tagged port to be member for the switch
Mu dear, If i had the Port in use, How to convert in interface?
The FG-600E does not have the Network-> Interfaces-> Type "Hardware Switch" Any Suggestions? The closest thing is Type "Software Switch"
Several models do not support hardware switch fabric. The best bet on those devices is to utilize FortiSwitches or to LAGG them down to a core switch of some sort.
Hi, Thanks for the video what is the difference in creating gui and cli?? I am trying to create from GUI but it was effecting on exisitng interfaces , do you think must do this from cli??
The GUI just executes CLI commands for you. I like the CLI for customization and specifics.
Looking to be able to conncect a handful of access switches into the fortigate without using a distribution switch. The access switches would have common vlans (e.g. staff, guest, student) on all of them, but only one gateway per vlan..so like sw1 connects to port 1 with vlan a,b,c and sw2 connects to port 2 with vlans a,b,c etc...I'm assuming hardware switch will work in this scenario?
Hardware switch will function just fine for what you are asking. All ports that are a member of that switch will pass the vlans that use that hardware switch as an interface.
Hi, can you please advice me how can i config span port on FG-3301E. actually i've FG datacernter and i wanna config span port in fortigate toward the Dark-race in order to collect the logs. appreciate your help
Thank you but it seems doesn't work on 30D.
Fortigate has to have switch fabric
How do you feel brother? It looks like your health leaves much to be desired!
Trucking along. Took some time off the past few weeks to get some rest and now I am back at it!
Hi, can you please advice me how can i config span port on FG-3301E. actually i've FG datacernter and i wanna config span port in fortigate toward the Dark-race in order to collect the logs. appreciate your help