In a FortiGate multi-tenancy configuration managing FortiSwitches, there are two primary methods to assign switch ports to a specific Virtual Domain (VDOM).

1. VLAN-to-VDOM Mapping: You can create a VLAN interface on the FortiLink aggregate interface within the managing VDOM (e.g., root). This VLAN interface is then assigned to a specific tenant VDOM. Subsequently, you assign physical FortiSwitch ports to this VLAN, which effectively directs all traffic from those ports to the designated tenant VDOM.

2. Virtual Port Pool: This feature is designed specifically for multi-tenancy. A global administrator creates a pool of FortiSwitch ports and assigns this entire pool to a tenant VDOM. The administrator of that VDOM can then manage and configure the ports within their assigned pool.

C. VDOM configuration is a FortiGate function. A managed FortiSwitch receives its configuration, including port assignments, from the FortiGate controller and cannot be configured directly with VDOMs.

D. The FortiLink interface itself is the management channel and must reside in the VDOM managing the FortiSwitch. Moving it to a tenant VDOM would break the management connection.

1. Fortinet FortiOS 7.6.0 Administration Guide, FortiSwitch Manager > Multi-tenancy (VDOMs), Page 1. This section explicitly states: "There are two ways to assign a FortiSwitch port to a VDOM: Create a virtual port pool... Assign a VLAN to a VDOM..."

2. Fortinet FortiSwitch Manager 7.6.0 Administration Guide, Multi-tenancy (VDOMs) > Assigning a VLAN to a VDOM. This section details the procedure: "You can assign a VLAN to a VDOM and then assign FortiSwitch ports to that VLAN."

3. Fortinet FortiSwitch Manager 7.6.0 Administration Guide, Multi-tenancy (VDOMs) > Creating a virtual port pool. This section describes the alternative method: "You can create a virtual port pool and then assign the virtual port pool to a VDOM."

4. Fortinet CLI Reference - FortiOS 7.6.0, config switch-controller virtual-port-pool. This command reference details the CLI structure for creating and managing virtual port pools for VDOM assignment.