Layer 3 Interfaces
Configuring a Routed Interface
Using the CLI:
Set the Allowed VLAN list on the internal interface. Include the VLANs of the routed ports.
config switch interface
edit internal
set allowed-vlans <vlan list>
end
Create a Layer 3 virtual interface corresponding to the physical port:
config system interface
edit <rvi name>
set
switch-members
<port>
<port>
...
next
edit <virtual device name>
set vlanid <vlan>
set ip <ip subnet> <mask>
set interface <rvi name>
set allowaccess ping telnet
Configure static routes, so that the switch will know how to route between VLANs:
config router static
edit 2
set device <virtual device name>
set dst <ip subnet>
Example Routed Port Configuration
The following is an example CLI configuration for Routed Port static routing.
In this configuration, we configure Port2 and Port6 as a Routed Port. We created interface I-RED and I-GREEN
as RVI interface. Remainder of the ports in the switch are normal Layer 2 ports.
1. Configure Native VLANs for Port2, Port6 and Port9. Also configure “internal” interface to allow native VLANs for
Port2, Port6 and Port9.:
config switch interface
edit port2
set native-vlan 10
edit port6
set native-vlan 20
edit port9
set native-vlan 30
edit internal
set allowed-vlans 10,20,30
end
2. Create L3 virtual interfaces corresponding to the physical ports:
config system interface
edit "i-red"
set switch-members "port2"
next
42 FortiSwitchOS-3.2.0
