I'm trying to get a software switch configuration working on a Fortigate 100D. It appears like devices plugged into the software switch ports can communicate between each-other, but they cannot reach the IP configured for the software switch "interface" of the fortigate on same subnet. Conversely, the fortigate command-line cannot ping or reach the systems plugged into the soft switch.
Please note that the software switch was configured using instructions provided directly by the fortigate documentation and support team. No indication was given in the documentation or by the support personnel that the feature would not work correctly during runtime when enabled. See below for the solution we came up with after over hour of runtime troubleshooting with fortinet support.
The reason for using soft switch feature in this case is to have capwap wifi "interface" on same subnet as some fortigate wired clients.
I was seeking support from the ServerFault expert community to see if some other network engineer had seen this problem and found a solution. After the question was posted, we continued working the issue with Fortinet support and were able to find a solution. I would still consider this a valuable question for ServerFault since the device was not functioning according to directions provided in the FortiGate documentation and Fortinet support team.
