Solved

Fortinet configuring VLAN's to setup a DMZ in a vSphere VST Environment

Posted on 2013-05-24
2
995 Views
Last Modified: 2013-05-28
Hi Folks,

We have Fortinet 1000A and want to move from physical DMZ uplink from hosts to configure and interface on the Fortinet and a VLAN sub interfaces on this interface to Cisco 6500 trunk VLAN's to that so we can create virtual DMZ's from vSwitch's in vSphere in VST tagged Vlan's.
0
Comment
Question by:999
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 18

Accepted Solution

by:
Garry Glendown earned 500 total points
ID: 39200547
What software release are you using? Assuming 4.0MR3 here ...
In general, go to the global interface config and click "create new", which should present an input form with "VLAN" already pre-selected. Select the appropriate physical interface next, then enter the VLAN ID you want to use ... the rest is the "normal" data required for any physical or vlan interface, so you should not have any problems there ...
Once you have that part configured, add appropriate rules ... you can move existing policies from the current DMZ port via command line, albeit depending on the age of your config starting over based on the current config might help remove unused stuff ...
0
 

Author Closing Comment

by:999
ID: 39200552
sweet ta!
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
Arrow Electronics was searching for a KVM  (Keyboard/Video/Mouse) switch that could display on one single monitor the current status of all units being tested on the rack.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question