Support automatically allowing and blocking intra-VLAN traffic based on FortiLink connectivity 7.4.1
You can now allow or block intra-VLAN traffic on the managed FortiSwitch units when the connection to the FortiGate device is lost.
To allow or block intra-VLAN traffic when the connection to the FortiGate device is lost:
config switch-controller fortilink-settings
edit "<FortiLink_interface>"
set access-vlan-mode { legacy | fail-open | fail-close}
next
end
| Option | Description |
|---|---|
|
legacy |
This is the default. When the connection to the FortiGate device is lost, intra-VLAN traffic on the managed FortiSwitch units is blocked. |
|
fail-open |
When the connection to the FortiGate device is lost, intra-VLAN traffic on the managed FortiSwitch units is allowed. |
|
fail-close |
When the connection to the FortiGate device is lost, intra-VLAN traffic on the managed FortiSwitch units is blocked. |