Add or edit a VLAN
To add or edit a VLAN:
-
In Switch > Configuration > VLANs:
-
Select the appropriate Site and Domain.
-
Click Create New to add a new VLAN interface.
-
Select a VLAN and click Edit to edit an existing VLAN.
-
-
In the form, enter or update the following information:
Field
Required
Description
Name
Y
Enter a unique name for the VLAN.
Type
Y
The type is automatically set to VLAN and is not editable.
Interface
Y
Select the physical interface port on the switch.
VLAN ID
Y
Enter a unique ID for this VLAN.
This value is automatically generated if no value is entered.
Color
N
Click Change to select the color that will be used to display information about this VLAN.
Addressing Mode
Y
Choose either Manual or DHCP.
IP/Netmask
Y
Enter the IP address and netmask for this VLAN.
This field is only available when Addressing Mode is Manual.
IPv6 Addressing Mode
Y
Choose either Manual or DHCP.
IPv6 Address/Profile
Y
Enter the IPv6 address and profilefor this VLAN.
This field is only available when IPv6 Addressing Mode is Manual.
Administrative Access
IPv4
N
Select the allowed administrative access ports.
DHCP Server
DHCP Status
Y
Enable or disable the FortiSwitch DHCP server for this VLAN.
Address Range
Y
Enter the address ranges for IP addresses to be issued.
This field is only available if DHCP Status is Enabled.
Netmask
Y
Enter the netmask to use for IP addresses issued.
This field is only available if DHCP Status is Enabled.
Default Gateway
Y
Select whether the gateway should be Same as interface IP or Specify a gateway IP address.
This field is only available if DHCP Status is Enabled.
DNS Server
Y
Select whether the assigned DNS server should be Same as System DNS, Same as Interface IP, or Specify a DNS server address.
This field is only available if DHCP Status is Enabled.
Lease Time
Y
Enable or disable an IP address lease time limit, and specify the lease limit in seconds.
This field is only available if DHCP Status is Enabled.
Network
Device Detection
N
Enable or disable automatic device detection, which allows the firewall device to use the information about connected devices detected by this switch.
IGMP Snooping
N
Enable or disable IGMP snooping.
DHCP Snooping
N
Enable or disable DHCP snooping.
Block intra-VLAN traffic
N
Enable or disable blocking traffic between this VLAN and other VLANs.
Miscellaneous
Comments
N
Enter comments, if needed.
Status
Y
Enable or disable this VLAN.
Per-Device Mapping
N
Configure per-device mapping. See Configuring per-device mapping.
-
Click Save.
Configuring per-device mapping
Use per-device mappings in switch VLANs to configure generic VLAN definitions that can be applied to all devices.
When using dynamic mapping, the devices specified will receive the configurations specified in the mapping rule. Devices which do not match will receive the default configuration.
To configure a VLAN per-device mapping:
-
In Switch > Configuration > VLANs, create or edit a VLAN definition.
-
In Per-Device Mapping, click Create.
-
Configure the mapping as follows:
Settings
Description
Mapped Device
Select the device to be mapped.
VLAN ID Enter a unique ID for this VLAN, a number from 1-4094.
IP/Network Mask
Specify the mapped IP address and netmask.
IPv6 Address/Prefix
If needed, enter the IPv6 address and prefix.
Mapped DHCP Server
Enable or disable the DHCP server on this SSID, then configure the DHCP server settings as needed.
Administrative access
Select the allowed administrative access methods.
-
Click Save.