FortiGate Administration Guide - FirewallShop.com

Interface
System Network
Switch Mode
The internal interface on 100A, 200A FortiGate models is a four port switch.
Normally the internal interface is configured as one interface shared by all four
ports. Switch mode allows you to configure each interface on the switch
separately with their own interfaces. The FortiGate-60B and FortiWiFi-60B internal
interface is a 6-port switch that functions in the same way.
The switch mode feature has two states - switch mode and interface mode. Switch
mode is the default mode with only one interface for the entire internal switch.
Interface mode allows you to configure each of the internal switch interfaces
separately. This allows you to assign different subnets and netmasks to each of
the internal interfaces.
Switch mode is only available on 100A and 200A models of Rev2.0 and higher
and on all 60B models. Consult your release notes for the most current list of
supported models for this feature.
Note: FortiWifi 60B units do not support switch mode in the GUI interface. They do support
switch mode in the CLI.
Selecting the Switch Mode control on the System > Network > Interface screen
takes you to the Switch Mode Management screen.
!
Caution: Before you are able to change between switch mode and interface mode all
references to ‘internal’ interfaces must be removed. This includes references such as
firewall policies, routing, DNS forwarding, DHCP services, VDOM interface assignments,
VLANS, and routing. If they are not removed, you will not be able to switch modes, and you
will see an error message.
Figure 34: Switch Mode Management
Switch Mode
Interface Mode
OK
Cancel
Select Switch Mode. Only one internal interface is displayed. This
is the default mode.
Select Interface Mode. All internal interfaces on the switch are
displayed as individually configurable interfaces.
Select to save your changes and return to the Interface screen.
Select to discard your changes and return to the Interface screen.
Switch mode in CLI
In addition to the GUI controls, Switch Mode can be configured using CLI
commands:
config system global
set internal-switch-mode {interface | switch}
end
As in the GUI, if you have not removed all references to the internal interface(s)
you will see error messages. Once you have removed these references, your
FortiGate unit will reboot and be in the new switch mode.
FortiGate Version 3.0 MR5 Administration Guide
82 01-30005-0203-20070830