How To Manage A FortiSwitch via FortiGate

So this is how you setup a FortiGate to manage a FortiSwitch.


Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!

This entry was posted in FortiGate, Fortinet GURU, Fortinet Videos, FortinetGURU Videos, FortiOS 6.2, FortiSwitch on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

4 thoughts on “How To Manage A FortiSwitch via FortiGate

  1. Jamie D.

    Hello there.

    We just replaced our Dell N series switches with 4 248E-FPOE switches. It is cabled in a ring and connected to x1 & x2 on a 100F. I’m experiencing a couple of problems that I can’t seem to figure out.

    1. The fortilink interface on the 100F remains down, even with the 4 switches connected to it via SFP cables to x1 & x2, yet we have internet so I know the traffic is going through that interface. If you go to WiFi & Switch Controller | Managed FortiSwitch, it’s constantly scanning and never stops, even if you reboot the 100F. If you manually add a switch using as S/N, it just adds it and it’s in an offline state. I do have the fortilink interface set to auto authorize & split interface is enabled.
    2. As soon as I set the switches to FortiLink managed, we lose internet and it never comes back and I can’t reach our firewall without connecting to the MGMT interface. The only way to get the internet back is to reset the switches to locally managed via console cable, which makes them not operate as a stack.

    FortiNet support won’t help since it’s a new setup, they’d rather me pay someone to come connect them than offer assistance. Any thoughts or ideas? Thanks in advance.

    Reply
    1. Mike Post author

      If the interface is configured as a FortiLink interface and the fortiswitch has recent firmware it should reboot in managed mode. From there you have to assign your VLANs the way you intend etc.

      Reply
  2. Habib Bilfaqi

    Hi Mike,

    I have a FG500E with x1 & x2 connected to Cisco 3850 – 10gig 24port switches that run port-channel. Those switches have multiple VLAN’s hanging off of them. I want to add FortiSwitch 248 FPOE behind the 3850 via SFP. How can I accomplish this so I could get to use Fortigate switch controller and span the VLAN’s onto Fortiswitch from the redundant ports that are directly connected to Cisco 3850 without destroying the current production config. I don’t mind letting current config evolve but I need to maintain mixed hardware and still have the ability to manage fortiswitch and span same vlan across both Cisco and Fortinet.

    Reply

Leave a Reply to Habib Bilfaqi Cancel reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.