FortiSwitch Managed By FortiOS 6 – Changing the admin password on the FortiGate for all managed FortiSwitch units

Changing the admin password on the FortiGate for all managed FortiSwitch units By default, each FortiSwitch has an admin account without a password. To replace the admin passwords for all FortiSwitch units managed by a FortiGate, use the following commands from the FortiGate CLI: config switch-controller switch-profile edit default set login-passwd-override {enable | disable} set […]

FortiSwitch Managed by FortiOS 6 – Converting to FortiSwitch standalone mode

Converting to FortiSwitch standalone mode Use one of the following commands to convert a FortiSwitch from FortiLink mode to standalone mode so that it will no longer be managed by a FortiGate: execute switch-controller factory-reset <switch-id> This command returns the FortiSwitch to the factory defaults and then reboots the FortiSwitch. If the FortiSwitch is configured […]

FortiSwitch Managed by FortiOS 6 – Configuring the FortiSwitch management port

Configuring the FortiSwitch management port If the FortiSwitch model has a dedicated management port, you can configure remote management to the FortiSwitch. In FortiLink mode, the FortiGate is the default gateway, so you need to configure an explicit route for the FortiSwitch management port. Using the Web administration GUI Go to Network > Static Routes […]

FortiSwitch Managed by FortiOS 6 – Grouping FortiSwitch units

Grouping FortiSwitch units You can simplify the configuration and management of complex topologies by creating FortiSwitch groups. A group can include one or more FortiSwitch units and you can include different models in a group. config switch-controller switch-group edit <name> set description <string> set members <serial-number> <serial-number> … end end Grouping FortiSwitch units allows you […]

FortiSwitch Managed by FortiOS 6 – Dual-homed servers connected to FortiLink tier-1 FortiSwitch units using an MCLAG

Dual-homed servers connected to FortiLink tier-1 FortiSwitch units using an MCLAG To configure a multichassis LAG, you need to configure FortiSwitch 1 and FortiSwitch 2 as MCLAG peer switches before creating a two-port LAG. Use the set mclag-icl enable command to create an inter-chassis link (ICL) on each FortiSwitch unit. Then you set up two […]

FortiSwitch Managed by FortiOS 6 Network topologies for managed FortiSwitch units

Network topologies for managed FortiSwitch units The FortiGate requires only one active FortiLink to manage all of the subtending FortiSwitch units (called stacking). You can configure the FortiLink as a physical interface or as a logical interface (associated with one or more physical interfaces). Depending on the network topology, you can also configure a standby […]

FortiSwitch Managed By FortiOS 6 – FortiLink mode over a layer-3 network

FortiLink mode over a layer-3 network This feature allows FortiSwitch islands (FSIs) to operate in FortiLink mode over a layer-3 network, even though they are not directly connected to the switch-controller FortiGate unit. FSIs contain one or more FortiSwitch units. The following limitations apply to FSIs operating in FortiLink mode over a layer-3 network: All […]

FortiSwitch Managed By FortiOS 6 – FortiLink configuration using the FortiGate CLI

FortiLink configuration using the FortiGate CLI This section describes how to configure FortiLink using the FortiGate CLI. Fortinet recommends using the FortiGate GUI because the CLI procedures are more complex (and therefore more prone to error). If you use one of the auto-discovery FortiSwitch ports, you can establish the FortiLink connection (single port or LAG) […]