FortiSwitch

Changing the admin password on the FortiGate for all managed FortiSwitch units By default, each FortiSwitch has an admin account without a password. To replace the admin passwords for all FortiSwitch units managed by a FortiGate, use the following commands from the FortiGate CLI: config switch-controller switch-profile edit default set login-passwd-override {enable | disable} set […]

Converting to FortiSwitch standalone mode Use one of the following commands to convert a FortiSwitch from FortiLink mode to standalone mode so that it will no longer be managed by a FortiGate: execute switch-controller factory-reset <switch-id> This command returns the FortiSwitch to the factory defaults and then reboots the FortiSwitch. If the FortiSwitch is configured […]

Configuring the FortiSwitch management port If the FortiSwitch model has a dedicated management port, you can configure remote management to the FortiSwitch. In FortiLink mode, the FortiGate is the default gateway, so you need to configure an explicit route for the FortiSwitch management port. Using the Web administration GUI Go to Network > Static Routes […]

Grouping FortiSwitch units You can simplify the configuration and management of complex topologies by creating FortiSwitch groups. A group can include one or more FortiSwitch units and you can include different models in a group. config switch-controller switch-group edit <name> set description <string> set members <serial-number> <serial-number> … end end Grouping FortiSwitch units allows you […]

Dual-homed servers connected to FortiLink tier-1 FortiSwitch units using an MCLAG To configure a multichassis LAG, you need to configure FortiSwitch 1 and FortiSwitch 2 as MCLAG peer switches before creating a two-port LAG. Use the set mclag-icl enable command to create an inter-chassis link (ICL) on each FortiSwitch unit. Then you set up two […]

Network topologies for managed FortiSwitch units The FortiGate requires only one active FortiLink to manage all of the subtending FortiSwitch units (called stacking). You can configure the FortiLink as a physical interface or as a logical interface (associated with one or more physical interfaces). Depending on the network topology, you can also configure a standby […]

FortiLink mode over a layer-3 network This feature allows FortiSwitch islands (FSIs) to operate in FortiLink mode over a layer-3 network, even though they are not directly connected to the switch-controller FortiGate unit. FSIs contain one or more FortiSwitch units. The following limitations apply to FSIs operating in FortiLink mode over a layer-3 network: All […]

FortiLink configuration using the FortiGate CLI This section describes how to configure FortiLink using the FortiGate CLI. Fortinet recommends using the FortiGate GUI because the CLI procedures are more complex (and therefore more prone to error). If you use one of the auto-discovery FortiSwitch ports, you can establish the FortiLink connection (single port or LAG) […]