Changing the DVLAN mode for FortiGates with NP7 processors

FortiGates with NP7 processors support both 802.1ad and 802.1Q double VLAN (DVLAN) modes. The default DVLAN mode is 802.1ad. You can change the DVLAN mode that the NP7 processors operate with using the following diagnose command:

diagnose npu np7 dvlan-mode {802.1Q | 802.1AD} {all | 0 | 1 | 2 | ...}

If your FortiGate has one NP7 processor, the command syntax is:

diagnose npu np7 dvlan-mode {802.1Q | 802.1AD} 0

If your FortiGate has multiple NP7 processors, you can change the DVLAN mode for individual NP7 processors using the IDs of the NP7 processor. For example, to change the DVLAN mode of NP#6, enter:

diagnose npu np7 dvlan-mode {802.1Q | 802.1AD} 6

To change the DVLAN mode of all NP7 processors, enter:

diagnose npu np7 dvlan-mode {802.1Q | 802.1AD} all

On a FortiGate with multiple NP7 processors, to configure NP#8 to operate in 802.1ad mode, enter:

diagnose npu np7 dvlan-mode 802.1AD 8

Using the diagnose npu np7 dvlan-mode command to change the DVLAN mode causes the FortiGate to restart, interrupting traffic.

You can use the diagnose npu np7 dvlan-mode-list command to view the current DVLAN mode setting for each NP7 processor.

FortiGates with NP7 processors also include a new outer-vlan-id option when configuring QinQ for virtual wire pairs. Example syntax:

config system virtual-wire-pair

edit "dvlan-test"

set member "port33" "port34"

set wildcard-vlan enable

set outer-vlan-id <id>

end