Fortinet 5003 - Manual (Page 29)

FortiGate-5140 fabric backplane communication Fabric gigabit switching to the network
FortiSwitch-5003A and 5003 Fabric and Base Backplane Communications Guide
01-30000-85717-20081205
29
If the data traffic contains VLAN-tagged packets, you must add the VLAN tags to
the FortiSwitch-5003A interfaces that will handle the VLAN-tagged traffic. For
example, to allow VLAN tags 201 to 210 on slots 8 and 10 and the F7 front panel
interface, from the FortiSwitch-5003A CLI enter:
config switch fabric-channel interface
edit "slot-8"
set allowed-vlans 1,201-210
next
edit "slot-10"
set allowed-vlans 1,201-210
next
edit "f7"
set allowed-vlans 1,201-210
end
Fabric gigabit switching to the network
You can use the FortiSwitch-5003A fabric front panel interfaces to connect the
fabric channel of a chassis to your network. Most often you would do this for data
communication between the network and a fabric channel. For a simple 10-gigabit
connection from your network to a fabric channel you can connect your network
directly to a FortiSwitch-5003A fabric channel front panel interface. This
connection provides data communication to the fabric1 or fabric2 interfaces of the
FortiGate-5000 boards installed in the chassis.
Figure 12 shows a FortiGate-5140 chassis containing two FortiSwitch-5003A
boards and 6 FortiGate-5001A boards. The chassis is connected to internal and
an external networks using FortiSwitch-5003A front panel fabric interfaces:
• The internal network is connected to fabric channel 2 using the F7 front panel
interface of the FortiSwitch-5003A board in hub/switch slot 2
• The external network is connected to fabric channel 1 using the F1 front panel
interface of the FortiSwitch-5003A board in hub/switch slot 1
In this configuration the FortiSwitch-5003A boards are operating as layer-2
switches and the FortiGate-5001A boards are operating as standalone FortiGate
units.
The chassis can also be connected to the network using any of the FortiGate front
panel interfaces. You can also install FortiGate AMC modules in the
FortiGate-5001A boards and connect networks to the AMC front panel interfaces.
The AMC modules and network connections to the AMC modules and FortiGate
boards are not shown in
Figure 12 .
If you have two FortiSwitch-5003A boards installed in a chassis you may need to
block communication between fabric channel 1 and fabric channel 2. See
“Fabric
channel connections between FortiSwitch-5003A boards” on page 27 for more
information.