Separate networks on each port

mk2mark · ‎04-19-2021

Hey guys,

Totally new to Fortinet devices so fair to assume a low level of knowledge. Is it possible with a 60F to have (7) networks on each port of the device that are isolated from each other, but all tied to the WAN/internet port?

Thanks!

Markus · ‎04-19-2021

Hi and welcome to the Forums. In short, yes. But you have to break up the hard switch(es). In the default conf, a/b are linked with fortilink and 1-5 with internal. To use all ports as it's own, these switches must be free'ed up. https://forum.fortinet.com/tm.aspx?m=149405 https://docs.fortinet.com/document/fortigate/6.4.2/administration-guide/100999/hardware-switch

________________________________________________________
--- NSE 4 ---
________________________________________________________

mk2mark · ‎04-20-2021

Thanks, that's helpful.

SJFriedl · ‎04-20-2021

Moving away from the hardware switch would certainly do this, but I did that originally and wish I hadn't. Configuring the entire hardware switch as a single interface with a VLAN trunk would make it easy to expand this in the future. If you're doing a VLAN environment, that would be straightforward.