FortiSwitch integrate with FortiGate

Author
yew
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/11/12 04:12:19
  • Status: offline
2019/11/12 04:16:03 (permalink)
0

FortiSwitch integrate with FortiGate

Hi,
 
How to integrate FortiSwitch with FortiGate to control intra VLAN ports?
 
My FortiSwitch is my access switch running on single VLAN, how to apply Fortigate policy scan from port1 to port 2?
 
 
#1

1 Reply Related Threads

    boneyard
    Gold Member
    • Total Posts : 183
    • Scores: 8
    • Reward points: 0
    • Joined: 2014/07/30 11:15:18
    • Status: offline
    Re: FortiSwitch integrate with FortiGate 2019/11/29 03:04:05 (permalink)
    0
    have a look at the documentation about this:
    https://help.fortinet.com/fos50hlp/56/Content/FortiOS/fortigate-managing-fortiswitch/Introduction.htm
     
    and for port isolation look at
    Enabling and disabling switch-controller access VLANs through FortiGateAccess VLANs are VLANs that aggregate client traffic solely to the FortiGate. This prevents direct client-to-client traffic visibility at the layer-2 VLAN layer. Clients can only communicate with the FortiGate. After the client traffic reaches the FortiGate, the FortiGate can then determine whether to allow various levels of access to the client by shifting the client's network VLAN as appropriate.
    Use enable to allow traffic only to and from the FortiGate and to block FortiSwitch port-to-port traffic on the specified VLAN. Use disable to allow normal traffic on the specified VLAN.
    config system interface
    edit <VLAN name>
    set switch-controller-access-vlan {enable | disable}
    next
    end
    #2
    Jump to:
    © 2019 APG vNext Commercial Version 5.5