Group Physical Interface

amirazizi Lv1Posted Nov-15-2025 00:56

This is my first time trying to configure nsf-1051. I tried to combine the interface in this firewall, but was unable to do so. Is it possible? I previously used FortiGate, in there I'm able to combine for example, port 1-4 as External, so it will act as LAN switch. In Sangfor, I can create DHCP option for eth1 for example, but cannot add the same DHCP to another interface.

RIM91 has solved this question and earned 20 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

first create a bridge group . Go to Network → Interface → Bridge. Add your Layer 2 ports (e.g., eth1, eth2, eth3) to this bridge group. The bridge group acts as a virtual Layer 3 interface for those ports. Then assign IP and DHCP to the bridge. After creating the bridge, assign an IP address (e.g., 192.168.1.1/24). Enable DHCP on the bridge interface and configure your pool. Lastly, Add the bridge to a Zone. If you need firewall rules, add the bridge interface to the appropriate zone (e.g., LAN).
Is this answer helpful?
Samir91 Lv1Posted Nov-16-2025 11:09
  
Sangfor does not allow you to simply group interfaces into a “switch-like” zone the way FortiGate does with hardware switch mode. Instead, Sangfor supports Link Aggregation (LACP) or Bridge Mode, but these are for bonding interfaces for redundancy or throughput, not for creating a LAN switch.If you want multiple ports to act as one network segment, you typically create a Bridge Group in Sangfor. This combines interfaces at Layer 2, so they share the same IP and DHCP settings.
amirazizi Lv1Posted Nov-16-2025 12:37
  
Thanks for the reply. I changed the port to layer 2 and added it to zones, but I didn't find a way to create a bridge group or set DHCP for the layer 2 port. How to proceed from here?
RIM91 Lv1Posted Nov-16-2025 13:46
  
first create a bridge group . Go to Network → Interface → Bridge. Add your Layer 2 ports (e.g., eth1, eth2, eth3) to this bridge group. The bridge group acts as a virtual Layer 3 interface for those ports. Then assign IP and DHCP to the bridge. After creating the bridge, assign an IP address (e.g., 192.168.1.1/24). Enable DHCP on the bridge interface and configure your pool. Lastly, Add the bridge to a Zone. If you need firewall rules, add the bridge interface to the appropriate zone (e.g., LAN).
amirazizi Lv1Posted Nov-16-2025 19:02
  
Last edited by amirazizi Nov-16-2025 19:05.

Thanks for the info. Although I cannot find the bridge group. I managed to configure it under VLAN

Here are my steps

1- Set all the desired interfaces to layer 2 and set Access ID to 1

2- Create VLAN with VLAN ID 1 (veth.1) and set the static IP

3- Create layer 3 Zone and add veth.1

4- Create a DHCP and bind it to veth.1

Thanks again for the replies. Really new to this, just got my device a couple days ago and still testing it.

This topic contains more resources

You must log in to download or view the file. Not registered yet? Register

x

I Can Help:

Change

Moderator on This Board

43
6
2

Started Topics

Followers

Follow

1
148
3

Started Topics

Followers

Follow

900
179
94

Started Topics

Followers

Follow

Board Leaders