Re: Routing on FGT100E
You could simply use a 'super-net' instead of adding one route for each subnet behind the L3 switch, like this:
on FGT: internal port address = 10.10.20.1/16
on L3 switch: uplink port address = 10.10.20.2/24
background: for each 'directly connected' subnet the FGT adds a route automatically. The 10.10.x.x 'super-net' contains not only the mgmt-LAN but also all 10.10.y.x subnets behind the L3 switch.
No changes necessary on the switch.
Or, if you want to do it by the book, add 10.10.30.0/24,10.10.40.0/24,10.10.50.0/24 on the FGT as static routes. Gateway is the L3 switch uplink address (e.g. 10.10.20.2).
Don't forget that you need policies to allow traffic from the subnets to the internet. As the switch does the routing between subnets you do not have control over inter-subnet traffic (which is a pity - let the FGT do the routing).
Ede " Kernel panic: Aiee, killing interrupt handler!"