In which two ways can you assign a FortiSwitch port to a VDOM using multi-tenancy setup? (Choose two.)

FortiOS supports two primary methods for FortiSwitch multi-tenancy with VDOMs. The first method involves creating a dedicated FortiLink interface within a specific VDOM, which assigns the entire managed FortiSwitch and all its ports to that VDOM. The second, more granular method, involves creating the FortiLink in the root VDOM and then using the config switch-controller virtual-port-pool command on the FortiGate CLI to create pools of FortiSwitch ports. These pools can then be assigned to different VDOMs, allowing a single FortiSwitch to serve multiple tenants securely.

B: Removing the FortiSwitch from FortiGate management (FortiLink) would prevent any VDOM assignment from the FortiGate, as it would operate in standalone mode.

D: In a FortiLink deployment, all configuration, including port assignments to VDOMs, is centrally managed and pushed down from the FortiGate. Direct assignment on the FortiSwitch is not the correct procedure.

1. FortiSwitch Manager by FortiOS Administration Guide 7.6.0, Page 118, Section: "Multi-tenancy (VDOMs)".

The document explicitly states the two supported modes:

"You can create a FortiLink interface in one VDOM and dedicate one or more FortiSwitch units to that VDOM." (Supports Answer A)

"You can create the FortiLink interface in the root VDOM and then assign a virtual port pool to one or more VDOMs." (Supports Answer C)

2. FortiSwitch Manager by FortiOS Administration Guide 7.6.0, Page 120, Section: "Configuring a virtual port pool".

This section provides the detailed CLI commands for creating and assigning virtual port pools: config switch-controller virtual-port-pool, edit , set description , config port-members, edit , end. This confirms the procedure for Answer C.