Hi all, I hope you're well. Does anyone have any experience with
FortiLAN and know if it is possible to bypass via MAC address the
captive portal on an SSID? I have had a look myself in FortiLAN and
reviewed documentation but haven't found any of use...
Hi all, Wonder if someone can help me understand the use case for the
auto-isl-port-group command on FortiSwitch. Taking the below diagram as
an example, if the the distribution layer layer is already configured
for MCLAG ICL when the access layer sw...
Hi all, I hope you're well. I have a question surrounding importing
previous configurations from an existing FortiGate to a new device. For
example, if I have a FortiGate already configured with FortiLink and a
number of managed FortiSwitches is it p...
Hi all, I hope you're well. I Wonder if someone can give me some
guidance on the best practice for auto-isl trunks. Once deployed and
automatically established, in order to prevent the trunk configuration
from being removed is there a way to disable ...
Hi all, I hope you're well. I have 4 x FortiSwitch 448E-FPOE devices
with two operating as MCLAG peers and the remaining two switches
connecting via MCLAG ISL trunks. The switches are currently running
version: FortiSwitch-448E-FPOE v7.4.2,build0801,...
Hi Gatlinllon, This will need to be configured only on links connecting
to downstream tiers if you have a multi-tier deployment, the
auto-isl-group name must match among MCLAG-ICL peers. This setting
instructs the switches to group ports from MCLAG p...
Hi InfraSec0, Yes for sure, whichever VLAN is configured for Port3 on
your FortiGates set this as the native-vlan on your AP ports so that
they can receive DHCP and connect for management purposes and then on
the allowed-vlans simply add the VLAN for...
I would say it is easier to create software switch interface with the
internal LAN interface and WiFi network virtual interfaces as members
this way the DHCP, policies etc are the same as both wired and wireless
client are on the same subnet. This me...
If you wanted to create a software switch, you need to make sure the
interface has 'no reference' associated otherwise you will be unable to
add it in.
Hi InfraSec0, I am assuming that you have a switch connected to your
200E HA cluster FortiGates? If you had both Port1 and Port3 connected to
VLAN's on the switch on the AP ports you will be able to set the
"native-vlan" to that of Port3 which will a...
