Creating a VLAN

You can create a VLAN or private VLAN, configure IGMP snooping and DHCP snooping, and add VLAN members by MAC address or IP address.

Go to Configuration > VLANs.
Select in the row of the FortiSwitch unit that you want to add the VLAN to.
Enter a number to identify the VLAN.
Add a description of the VLAN.
Enable or disable whether this VLAN is a private VLAN.
If you want to use IGMP snooping on the VLAN:
1. Select the Enable checkbox.
2. If you want to use IGMP proxy, select the Enable checkbox.
3. Select to add an IGMP static group, enter the name of the group, enter the multicast address, and enter the members of the group.
If you want to use DHCP snooping on the VLAN:
1. Select the Enable checkbox.
2. If you want the system to verify that the source MAC address in the DHCP request from an untrusted port matches the client hardware address, enable DHCP Snooping Verify MAC Address.
3. If you want to include option-82 data in the DHCP request, enable DHCP Snooping Option 82.
4. If you want dynamic ARP inspection on the VLAN, enable Arp Inspection.
5. Select to add a DHCP server in the allowed server list and then enter the server name and IP address.
To add VLAN members by MAC address, select and then enter a description and the MAC address.
To add VLAN members by IP address, select and then enter a description, IP address, and netmask.
Select Save.

You can create a VLAN or private VLAN, configure IGMP snooping and DHCP snooping, and add VLAN members by MAC address or IP address.

Go to Configuration > VLANs.
Select in the row of the FortiSwitch unit that you want to add the VLAN to.
Enter a number to identify the VLAN.
Add a description of the VLAN.
Enable or disable whether this VLAN is a private VLAN.
If you want to use IGMP snooping on the VLAN:
1. Select the Enable checkbox.
2. If you want to use IGMP proxy, select the Enable checkbox.
3. Select to add an IGMP static group, enter the name of the group, enter the multicast address, and enter the members of the group.
If you want to use DHCP snooping on the VLAN:
1. Select the Enable checkbox.
2. If you want the system to verify that the source MAC address in the DHCP request from an untrusted port matches the client hardware address, enable DHCP Snooping Verify MAC Address.
3. If you want to include option-82 data in the DHCP request, enable DHCP Snooping Option 82.
4. If you want dynamic ARP inspection on the VLAN, enable Arp Inspection.
5. Select to add a DHCP server in the allowed server list and then enter the server name and IP address.
To add VLAN members by MAC address, select and then enter a description and the MAC address.
To add VLAN members by IP address, select and then enter a description, IP address, and netmask.
Select Save.