Interface settings

Administrators can configure both physical and virtual FortiGate interfaces in Network > Interfaces. There are different options for configuring interfaces when FortiGate is in NAT mode or transparent mode.

The available options will vary depending on feature visibility, licensing, device model, and other factors. The following list is not comprehensive.

To configure an interface in the GUI:
  1. Go to Network > Interfaces.
  2. Click Create New > Interface.
  3. Configure the interface fields:

    Interface Name

    Physical interface names cannot be changed.


    Enter an alternate name for a physical interface on the FortiGate unit. This field appears when you edit an existing physical interface. The alias does not appear in logs.

    The maximum length of the alias is 25 characters.


    The configuration type for the interface, such as VLAN, Software Switch. 802.3ad Aggregate, and others.


    This field is available when Type is set to VLAN.

    Select the name of the physical interface that you want to add a VLAN interface to. Once created, the VLAN interface is listed below its physical interface in the Interface list.

    You cannot change the physical interface of a VLAN interface.


    This field is available when Type is set to VLAN.

    Enter the VLAN ID. The VLAN ID can be any number between 1 and 4094 and must match the VLAN ID added by the IEEE 802.1Q-compliant router or switch that is connected to the VLAN subinterface.

    The VLAN ID can be edited after the interface is added.

    VRF ID

    Virtual Routing and Forwarding (VRF) allows multiple routing table instances to coexist on the same router. One or more interface can have a VRF, and packets are only forwarded between interfaces with the dame VRF.

    Virtual Domain

    Select the virtual domain to add the interface to.

    Only administrator accounts with the super_admin profile can change the Virtual Domain.

    Interface Members

    This section can have different formats depending on the Type.

    Members can be selected for some interface types:

    • Software Switch or Hardware Switch: Specify the physical and wireless interfaces joined into the switch.

    • 802.3ad Aggregate or Redundant Interface: This field includes the available and selected interface lists.


    Set the role setting for the interface. Different settings will be shown or hidden when editing an interface depending on the role:

    • LAN: Used to connected to a local network of endpoints. It is default role for new interfaces.
    • WAN: Used to connected to the inter