Hot!Fortigate 200E Zone Vs Interface

Author
avilt
Bronze Member
  • Total Posts : 39
  • Scores: 0
  • Reward points: 0
  • Joined: 2014/02/11 03:16:33
  • Status: offline
2019/11/03 03:16:14 (permalink)
0

Fortigate 200E Zone Vs Interface

I have procured a new Fortigate 200E firewall and I need to put ports 1 to 4 in a single vlan (same segment)
How do I define this setup?  Shall I define a new zone or interface?
#1

4 Replies Related Threads

    ede_pfau
    Expert Member
    • Total Posts : 6097
    • Scores: 490
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Fortigate 200E Zone Vs Interface 2019/11/03 11:52:18 (permalink)
    0
    Two obvious choices would be
    - hardware switch
    or
    - LACP trunk
    But...unfortunately the 200E does not have a hw switch chip so it would emulate a switch in software. This will surely impact CPU load a lot. Not recommended.
     
    Hopefully the switch the FGT is connected to is LACP capable. Create an LACP trunk from GUI, and fine-tune it in CLI if you need to. All ports will participate in traffic, adding bandwidth and redundancy.

    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #2
    avilt
    Bronze Member
    • Total Posts : 39
    • Scores: 0
    • Reward points: 0
    • Joined: 2014/02/11 03:16:33
    • Status: offline
    Re: Fortigate 200E Zone Vs Interface 2019/11/03 20:39:50 (permalink)
    0
    Just to clarify, even if I use it as a software switch, my systems will not have any traffic within the vlan subnet (software switch), they will talk to a system which is connected to firewall outside interface using a dedicated switch.
     
    I believe if I have huge traffic within a software switch it's a problem right?
    post edited by avilt - 2019/11/03 22:37:41
    #3
    avilt
    Bronze Member
    • Total Posts : 39
    • Scores: 0
    • Reward points: 0
    • Joined: 2014/02/11 03:16:33
    • Status: offline
    Re: Fortigate 200E Zone Vs Interface 2019/11/09 07:06:49 (permalink)
    0
    Can I use the software switch when there is no switch but my traffic is not within the vlan (software switch) ?
    #4
    ede_pfau
    Expert Member
    • Total Posts : 6097
    • Scores: 490
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Fortigate 200E Zone Vs Interface 2019/11/10 04:48:13 (permalink)
    0
    Of course you can use a software-based switch. The FG-200E does have a decent CPU so that with moderate load you won't notice the difference to a hardware-based switch much.
     
    You wrote that you need to put 4 ports into the same VLAN. Isn't that the classic situation of an access switch? Why not expand your FGT with a FortiSwitch? They are fully manageable from the FGT, fully monitored and cheap (in absolute price and cheaper per port than Cisco).
     
    Anyways, if you want to keep this simple, create a sw switch and look how far you get. It doesn't matter if traffic is predominantely inter-vlan or external.

    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #5
    Jump to:
    © 2019 APG vNext Commercial Version 5.5