Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    Home FortiWeb 6.3.7 CLI Reference
    6.3.7
    7.6.1
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.3.23
    6.3.19
    6.3.18
    6.3.17
    6.3.16
    6.3.15
    6.3.14
    6.3.13
    6.3.11
    6.3.10
    6.3.9
    6.3.7
    6.3.6
    6.3.5
    6.3.4
    6.3.3
    6.3.2
    6.3.1
    6.3.0
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.1.2
    6.1.1
    5.7.0
    5.6.1
    5.6.0

    system v-zone

    system v-zone

    Use this command to configure bridged network interfaces, also called v-zones.

    Bridges allow network connections to travel through the FortiWeb appliance’s physical network ports without explicitly connecting to one of its IP addresses.

    For FortiWeb-VM, you must create vSwitches before you can configure a bridge. For details, see the FortiWeb-VM Install Guide:

    https://docs.fortinet.com/fortiweb/hardware

    To use this command, your administrator account’s access control profile must have either w or rw permission to the netgrp area. For details, see Permissions.

    Syntax

    config system v-zone

    edit "<bridge_name>"

    set interfaces {"<interface_name>" "<interface_name>" ...}

    set monitor {enable | disable}

    set mtu <mtu_int>

    set use-interface-macs {"<interface_name>" "<interface_name>" ...}

    set multicast-snooping {enable | disable}

    next

    end

    Variable Description Default

    "<bridge_name>"

    Type the name of the bridge. The maximum length is 15 characters.

    To display the list of existing bridges, type:

    edit ?

    		No default.

    interfaces {"<interface_name>" "<interface_name>" ...}

    		 Type the names of two or more network interfaces that currently have no IP address of their own, nor are members of another bridge, and therefore could be members of this bridge. Separate each name with a space. The maximum length is 63 characters. No default.

    mtu <mtu_int>

    Enter the maximum transmission unit (MTU) that the bridge supports.

    When you specify the MTU for a bridge, FortiWeb automatically sets the MTU for the v-zone members to the same value.

    Valid values are 512–9216 (for IPv4) or 1280–9216 (for IPv6).

    		 1500

    multicast-snooping {enable | disable}

    Enable/disable multicast snooping.

    		No default

    monitor {enable | disable}

    		 Specifies whether FortiWeb automatically brings down all members of this v-zone if one member goes down. disable

    use-interface-macs {"<interface_name>" "<interface_name>" ...}

    		 Enter the names of network interfaces that are members of the bridge and send and transmit traffic using the MAC address of their corresponding FortiWeb network interface.

    When the operation mode is True Transparent Proxy, by default, traffic to the back-end servers preserves the MAC address of the source. If you are using FortiWeb with front-end load balancers that are in a high availability cluster that uses multiple bridges, this mechanism can cause switching problems on failover. When the v-zone uses the MAC address of the FortiWeb network interface instead, a failover does not interrupt the flow of traffic.

    Available only when the operation mode is True Transparent Proxy.    		 No default.

    Example

    This example configures a true bridge between port3 and port4. The bridge has no virtual network interface, and so it cannot respond to pings.

    config system v-zone

    edit bridge1

    set interfaces port3 port4

    next

    end

    Related topics

    Previous
    Next

    system v-zone

    system v-zone

    Use this command to configure bridged network interfaces, also called v-zones.

    Bridges allow network connections to travel through the FortiWeb appliance’s physical network ports without explicitly connecting to one of its IP addresses.

    For FortiWeb-VM, you must create vSwitches before you can configure a bridge. For details, see the FortiWeb-VM Install Guide:

    https://docs.fortinet.com/fortiweb/hardware

    To use this command, your administrator account’s access control profile must have either w or rw permission to the netgrp area. For details, see Permissions.

    Syntax

    config system v-zone

    edit "<bridge_name>"

    set interfaces {"<interface_name>" "<interface_name>" ...}

    set monitor {enable | disable}

    set mtu <mtu_int>

    set use-interface-macs {"<interface_name>" "<interface_name>" ...}

    set multicast-snooping {enable | disable}

    next

    end

    Variable Description Default

    "<bridge_name>"

    Type the name of the bridge. The maximum length is 15 characters.

    To display the list of existing bridges, type:

    edit ?

    		No default.

    interfaces {"<interface_name>" "<interface_name>" ...}

    		 Type the names of two or more network interfaces that currently have no IP address of their own, nor are members of another bridge, and therefore could be members of this bridge. Separate each name with a space. The maximum length is 63 characters. No default.

    mtu <mtu_int>

    Enter the maximum transmission unit (MTU) that the bridge supports.

    When you specify the MTU for a bridge, FortiWeb automatically sets the MTU for the v-zone members to the same value.

    Valid values are 512–9216 (for IPv4) or 1280–9216 (for IPv6).

    		 1500

    multicast-snooping {enable | disable}

    Enable/disable multicast snooping.

    		No default

    monitor {enable | disable}

    		 Specifies whether FortiWeb automatically brings down all members of this v-zone if one member goes down. disable

    use-interface-macs {"<interface_name>" "<interface_name>" ...}

    		 Enter the names of network interfaces that are members of the bridge and send and transmit traffic using the MAC address of their corresponding FortiWeb network interface.

    When the operation mode is True Transparent Proxy, by default, traffic to the back-end servers preserves the MAC address of the source. If you are using FortiWeb with front-end load balancers that are in a high availability cluster that uses multiple bridges, this mechanism can cause switching problems on failover. When the v-zone uses the MAC address of the FortiWeb network interface instead, a failover does not interrupt the flow of traffic.

    Available only when the operation mode is True Transparent Proxy.    		 No default.

    Example

    This example configures a true bridge between port3 and port4. The bridge has no virtual network interface, and so it cannot respond to pings.

    config system v-zone

    edit bridge1

    set interfaces port3 port4

    next

    end

    Related topics

    Previous
    Next