Fortinet white logo
Fortinet white logo

CLI Reference

config system switch-interface

config system switch-interface

Description: When the FortiExtender is in standalone mode, you can configure your switch interface settings.

When the FortiExtender is being managed from the FortiGate, you can view LAN extension settings synced from the FortiGate. You cannot configure these settings directly on the FortiExtender; you must make them through the FortiGate LAN extension profile first.

config system switch-interface
  edit <name>
    set vlan-support [enable | disable]
    config member 
      edit <name1> 
        set type [ aggregate | physical | vap]
        set port
        set vids {1-4089}
        set pvid {1-4089} 
      next
    end
    set stp [enable | disable]
    set td-mode [disable | include]
  next
end

Sample syntax:

config system switch-interface
    edit le-switch
        set vlan-support disable
        config member
            edit lan
                set type physical
                set port lan
                set vids
                set pvid 1
            next
        end
        set stp disable
        set ts-mode include
        config traffic-split
            edit 1
                set dst-mac d2:0c:8e:d2:c6:6b
                set dst-addr le-ts-vsdb
                set services
            next
        end
    next
end
Parametrer Description Type Size Default

vlan-support

Enable/disable VLAN support.

option

-

stp Spanning Tree Protocol. option - disable
Option Description
enable Enable Spanning Tree Protocol.
disable Disable Spanning Tree Protocol.

ts-mode

Read-only: Split tunnel mode.

option

-

disable

Option Description
include Enable Split tunnel mode
disable Disable Split tunnel mode.

dst-mac

Read-only: MAC address of the remote gateway pushed from FortiOS.

string

- none

dst-addr

Read-only: Destination IP addresses

string

- none

services

Read-only: Internet services.

options

- none
config members
Parameter Description

Type

Size

Default

config member

Interfaces within the virtual switch.

option

-

none

name

The LAN port ID.

string

-

none

type

Interface type.

option

-

port

Interface within the virtual switch.

option

-

vap

Virtual Access Point, which must NOT be configured as a WLAN bridge, will be added as a member of the switch-interface.

option

-

vids

VLAN ID list.

integer

1 to 4089

pvid

Port VLAN ID.

integer

1 to 4089

config system switch-interface

config system switch-interface

Description: When the FortiExtender is in standalone mode, you can configure your switch interface settings.

When the FortiExtender is being managed from the FortiGate, you can view LAN extension settings synced from the FortiGate. You cannot configure these settings directly on the FortiExtender; you must make them through the FortiGate LAN extension profile first.

config system switch-interface
  edit <name>
    set vlan-support [enable | disable]
    config member 
      edit <name1> 
        set type [ aggregate | physical | vap]
        set port
        set vids {1-4089}
        set pvid {1-4089} 
      next
    end
    set stp [enable | disable]
    set td-mode [disable | include]
  next
end

Sample syntax:

config system switch-interface
    edit le-switch
        set vlan-support disable
        config member
            edit lan
                set type physical
                set port lan
                set vids
                set pvid 1
            next
        end
        set stp disable
        set ts-mode include
        config traffic-split
            edit 1
                set dst-mac d2:0c:8e:d2:c6:6b
                set dst-addr le-ts-vsdb
                set services
            next
        end
    next
end
Parametrer Description Type Size Default

vlan-support

Enable/disable VLAN support.

option

-

stp Spanning Tree Protocol. option - disable
Option Description
enable Enable Spanning Tree Protocol.
disable Disable Spanning Tree Protocol.

ts-mode

Read-only: Split tunnel mode.

option

-

disable

Option Description
include Enable Split tunnel mode
disable Disable Split tunnel mode.

dst-mac

Read-only: MAC address of the remote gateway pushed from FortiOS.

string

- none

dst-addr

Read-only: Destination IP addresses

string

- none

services

Read-only: Internet services.

options

- none
config members
Parameter Description

Type

Size

Default

config member

Interfaces within the virtual switch.

option

-

none

name

The LAN port ID.

string

-

none

type

Interface type.

option

-

port

Interface within the virtual switch.

option

-

vap

Virtual Access Point, which must NOT be configured as a WLAN bridge, will be added as a member of the switch-interface.

option

-

vids

VLAN ID list.

integer

1 to 4089

pvid

Port VLAN ID.

integer

1 to 4089