Справочник Пользователя для Fortinet 5003

Скачать
Страница из 128
FortiGate-5140 fabric backplane communication 
Fabric gigabit switching to the network
FortiSwitch-5003A and 5003   Fabric and Base Backplane Communications Guide
01-30000-85717-20081205
29
If the data traffic contains VLAN-tagged packets, you must add the VLAN tags to 
the FortiSwitch-5003A interfaces that will handle the VLAN-tagged traffic. For 
example, to allow VLAN tags 201 to 210 on slots 8 and 10 and the F7 front panel 
interface, from the FortiSwitch-5003A CLI enter:
config switch fabric-channel interface
edit "slot-8"
set allowed-vlans 1,201-210
next
edit "slot-10"
set allowed-vlans 1,201-210
next
edit "f7"
set allowed-vlans 1,201-210
end
Fabric gigabit switching to the network
You can use the FortiSwitch-5003A fabric front panel interfaces to connect the 
fabric channel of a chassis to your network. Most often you would do this for data 
communication between the network and a fabric channel. For a simple 10-gigabit 
connection from your network to a fabric channel you can connect your network 
directly to a FortiSwitch-5003A fabric channel front panel interface. This 
connection provides data communication to the fabric1 or fabric2 interfaces of the 
FortiGate-5000 boards installed in the chassis.
 shows a FortiGate-5140 chassis containing two FortiSwitch-5003A 
boards and 6 FortiGate-5001A boards. The chassis is connected to internal and 
an external networks using FortiSwitch-5003A front panel fabric interfaces:
• The internal network is connected to fabric channel 2 using the F7 front panel 
interface of the FortiSwitch-5003A board in hub/switch slot 2
• The external network is connected to fabric channel 1 using the F1 front panel 
interface of the FortiSwitch-5003A board in hub/switch slot 1
In this configuration the FortiSwitch-5003A boards are operating as layer-2 
switches and the FortiGate-5001A boards are operating as standalone FortiGate 
units.
The chassis can also be connected to the network using any of the FortiGate front 
panel interfaces. You can also install FortiGate AMC modules in the 
FortiGate-5001A boards and connect networks to the AMC front panel interfaces. 
The AMC modules and network connections to the AMC modules and FortiGate 
boards are not shown in 
If you have two FortiSwitch-5003A boards installed in a chassis you may need to 
block communication between fabric channel 1 and fabric channel 2. See 
 for more 
information.