Rules For Vlan Ids; Transparent Mode Virtual Domains And Vlans - Fortinet FortiGate FortiGate-400A Administration Manual

VLANs in Transparent mode

Rules for VLAN IDs

Transparent mode virtual domains and VLANs

68
Figure 17: FortiGate unit in Transparent mode
VLAN 1
VLAN ID = 100
VLAN
switch
FortiGate unit
operating in
Transparent mode
In Transparent mode two VLAN subinterfaces added to the same physical interface
cannot have the same VLAN ID. However, you can add two or more VLAN
subinterfaces with the same VLAN IDs to different physical interfaces. There is no
internal connection or link between two VLAN subinterfaces with same VLAN ID. Their
relationship is the same as the relationship between any two FortiGate network
interfaces.
VLAN subinterfaces are added to and associated with virtual domains. By default the
FortiGate configuration includes one virtual domain, named root, and you can add as
many VLAN subinterfaces as you require to this virtual domain.
You can add more virtual domains if you want to separate groups of VLAN
subinterfaces into virtual domains. For information on adding and configuring virtual
domains, see "System virtual domain" on page 133
01-28006-0096-20041105
VLAN 2
VLAN ID = 200
POWER
VLAN 1
VLAN
VLAN 2
Trunk
VLAN 3
Internal
Esc Enter
External
VLAN 1
VLAN
VLAN 2
Trunk
VLAN 3
VLAN
POWER
switch
Untagged
packets
Router
Internet
System network
VLAN 3
VLAN ID = 300
Fortinet Inc.