FortiGate Administration Guide - FirewallShop.com

VLANs in Transparent mode
System Network
Figure 58: FortiGate unit in Transparent mode
Internet
Router
Untagged packets
VLAN Switch
VLAN Trunk
VLAN 1
VLAN 2
VLAN 3
FortiGate unit
in Transparent mode
VLAN Trunk
VLAN 1
VLAN 2
VLAN 3
VLAN Switch
VLAN 1
VLAN 2
VLAN 3
VLAN 1 Network
VLAN 2 Network
VLAN 3 Network
Rules for VLAN IDs
In Transparent mode two VLAN subinterfaces added to the same physical
interface cannot have the same VLAN ID. However, you can add two or more
VLAN subinterfaces with the same VLAN IDs to different physical interfaces.
There is no internal connection or link between two VLAN subinterfaces with the
same VLAN ID. Their relationship is the same as the relationship between any two
FortiGate network interfaces.
Note: There is a maximum of 255 VLANs allowed per interface in Transparent mode.
Transparent mode virtual domains and VLANs
VLAN subinterfaces are added to and associated with virtual domains. By default
the FortiGate configuration includes one virtual domain, named root, and you can
add as many VLAN subinterfaces as you require to this virtual domain.
You can add more virtual domains if you want to separate groups of VLAN
subinterfaces into virtual domains. For information on adding and configuring
virtual domains, see “Using virtual domains” on page 71
FortiGate Version 3.0 MR5 Administration Guide
112 01-30005-0203-20070830