Fortigate 110C switch mode改成interface mode

用CLI設看看

FG100CXXXX # config system global
FG100CXXXX (global) # FG100CXXXX (global) # set internal-switch-mode hub          hub interface    interface switch       switch FG100CXXXX (global) # set internal-switch-mode interface
FG100CXXXX (global) # FG100CXXXX (global) # end Changing switch mode will reboot the system! Do you want to continue? (y/n)y
Interface switch is in use attribute set operator error, -23, discard the setting Command fail. Return code -23

嗯？ switch is in use?

想了一下，猜想是default policy的關係

用diag指令查查

FG100CXXXX # diagnose sys checkused system.interface.name switch entry used by table firewall.policy:policyid ‘1’

Bingo!

FG100CXXXX # config firewall policy
FG100CXXXX (policy) # delete 1
FG100CXXXX (policy) # end
FG100CXXXX # diagnose sys checkused system.interface.name switch

沒有任何設定使用switch interface了

這時再下..

FG100CXXXX # config system global
FG100CXXXX (global) # set internal-switch-mode interface
FG100CXXXX (global) # end Changing switch mode will reboot the system! Do you want to continue? (y/n)y
FG100CXXXX #
The system is going down NOW !!