Fortinet 5003 - Manual (Page 52)

FortiSwitch-5003A and 5003 Fabric and Base Backplane Communications Guide
52 01-30000-85717-20081205
Fabric gigabit switching to the network FortiGate-5050 fabric backplane communication
If the data traffic contains VLAN-tagged packets, you must add the VLAN tags to
the FortiSwitch-5003A interfaces that will handle the VLAN-tagged traffic. For
example, to allow VLAN tags 201 to 210 on slots 3, 4, and 5 and the F1 front panel
interface, from the FortiSwitch-5003A CLI enter:
config switch fabric-channel interface
edit "slot-3"
set allowed-vlans 1,201-210
next
edit "slot-4"
set allowed-vlans 1,201-210
next
edit "slot-5"
set allowed-vlans 1,201-210
next
edit "f1"
set allowed-vlans 1,201-210
end
Fabric gigabit switching to the network
You can use the FortiSwitch-5003A fabric front panel interfaces to connect the
fabric channel of a chassis to your network. Most often you would do this for data
communication between the network and a fabric channel. For a simple 10-gigabit
connection from your network to a fabric channel you can connect your network
directly to a FortiSwitch-5003A fabric channel front panel interface. This
connection provides data communication to the fabric1 or fabric2 interfaces of the
FortiGate-5000 boards installed in the chassis.
Figure 19 shows a FortiGate-5050 chassis containing two FortiSwitch-5003A
boards and three FortiGate-5001A boards. The chassis is connected to internal
and an external networks using FortiSwitch-5003A front panel fabric interfaces:
• The internal network is connected to fabric channel 2 using the F7 front panel
interface of the FortiSwitch-5003A board in hub/switch slot 2
• The external network is connected to fabric channel 1 using the F1 front panel
interface of the FortiSwitch-5003A board in hub/switch slot 1
In this configuration the FortiSwitch-5003A boards are operating as layer-2
switches and the FortiGate-5001A boards are operating as standalone FortiGate
units.
The chassis can also be connected to the network using any of the FortiGate front
panel interfaces. You can also install FortiGate AMC modules in the
FortiGate-5001A boards and connect networks to the AMC front panel interfaces.
The AMC modules and network connections to the AMC modules and FortiGate
boards are not shown in
Figure 19 .