Fortinet black logo

Administration Guide

Switch virtual interfaces

Copy Link
Copy Doc ID f65c09ce-240d-11ed-9eba-fa163e15d75b:626301
Download PDF

Switch virtual interfaces

A switch virtual interface (SVI) is a logical interface that is associated with a VLAN and supports routing and switching protocols.

You can assign an IP address to the SVI to enable routing between VLANs. For example, SVIs can route between two different VLANs connected to a switch (no need to connect through a layer-3 router).

Configuring a switch virtual interface

Using the GUI:
  1. Go to System > Network > Interface > VLAN.
  2. Select Add VLAN.
  3. Enter a name for the interface.
  4. Select internal from the Interface drop-down list.
  5. Enter a VLAN identifier in the VLAN ID field.
  6. Select Static for the mode and enter an IP address and netmask in the IP/Netmask field.
  7. Select the administration status.
  8. Select PING, SSH, and TELNET for the Access options.
  9. Select Add.
Using the CLI:

Create a system interface. Give it an IP subnet and an associated VLAN:

config system interface

edit <system interface name>

set ip <IP address and mask>

set vlanid <vlan>

set allowaccess ping ssh telnet

Example SVI configuration

The following is an example CLI configuration for SVI static routing.

In this configuration, Server-1 is connected to switch Port1, and Server-2 is connected to switch Port2. Port1 is a member of VLAN 4000, and Port2 is a member of VLAN 2. Port1 is the gateway for Server-1, and port2 is the gateway for Server-2.

NOTE: For simplicity, assume that both port1 and port are on same switch.

  1. Configure the native VLANs for Port 1 and Port 2:

    config switch interface

    edit port1

    set native-vlan 4000

    edit port2

    set native-vlan 2

    end

  2. Create L3 system interfaces that correspond to Port 1 (VLAN 4000) and Port 2 (VLAN 2):

    config system interface

    edit vlan4000

    set ip 192.168.11.1/24

    set vlanid 4000

    set allowaccess ping ssh telnet

    next

    edit vlan2

    set ip 192.168.10.1/24

    set vlanid 2

    set allowaccess ping ssh telnet

    end

Viewing the SVI configuration

Display the status of SVI configuration using following command:

show system interface [ <system interface name> ]

Switch virtual interfaces

A switch virtual interface (SVI) is a logical interface that is associated with a VLAN and supports routing and switching protocols.

You can assign an IP address to the SVI to enable routing between VLANs. For example, SVIs can route between two different VLANs connected to a switch (no need to connect through a layer-3 router).

Configuring a switch virtual interface

Using the GUI:
  1. Go to System > Network > Interface > VLAN.
  2. Select Add VLAN.
  3. Enter a name for the interface.
  4. Select internal from the Interface drop-down list.
  5. Enter a VLAN identifier in the VLAN ID field.
  6. Select Static for the mode and enter an IP address and netmask in the IP/Netmask field.
  7. Select the administration status.
  8. Select PING, SSH, and TELNET for the Access options.
  9. Select Add.
Using the CLI:

Create a system interface. Give it an IP subnet and an associated VLAN:

config system interface

edit <system interface name>

set ip <IP address and mask>

set vlanid <vlan>

set allowaccess ping ssh telnet

Example SVI configuration

The following is an example CLI configuration for SVI static routing.

In this configuration, Server-1 is connected to switch Port1, and Server-2 is connected to switch Port2. Port1 is a member of VLAN 4000, and Port2 is a member of VLAN 2. Port1 is the gateway for Server-1, and port2 is the gateway for Server-2.

NOTE: For simplicity, assume that both port1 and port are on same switch.

  1. Configure the native VLANs for Port 1 and Port 2:

    config switch interface

    edit port1

    set native-vlan 4000

    edit port2

    set native-vlan 2

    end

  2. Create L3 system interfaces that correspond to Port 1 (VLAN 4000) and Port 2 (VLAN 2):

    config system interface

    edit vlan4000

    set ip 192.168.11.1/24

    set vlanid 4000

    set allowaccess ping ssh telnet

    next

    edit vlan2

    set ip 192.168.10.1/24

    set vlanid 2

    set allowaccess ping ssh telnet

    end

Viewing the SVI configuration

Display the status of SVI configuration using following command:

show system interface [ <system interface name> ]