Fortinet configuring VLAN's to setup a DMZ in a vSphere VST Environment

Hi Folks,

We have Fortinet 1000A and want to move from physical DMZ uplink from hosts to configure and interface on the Fortinet and a VLAN sub interfaces on this interface to Cisco 6500 trunk VLAN's to that so we can create virtual DMZ's from vSwitch's in vSphere in VST tagged Vlan's.
999Asked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
Garry GlendownConnect With a Mentor Consulting and Network/Security SpecialistCommented:
What software release are you using? Assuming 4.0MR3 here ...
In general, go to the global interface config and click "create new", which should present an input form with "VLAN" already pre-selected. Select the appropriate physical interface next, then enter the VLAN ID you want to use ... the rest is the "normal" data required for any physical or vlan interface, so you should not have any problems there ...
Once you have that part configured, add appropriate rules ... you can move existing policies from the current DMZ port via command line, albeit depending on the age of your config starting over based on the current config might help remove unused stuff ...
0
 
999Author Commented:
sweet ta!
0
All Courses

From novice to tech pro — start learning today.