Technical Tip: No Device Information Displayed under 'config switch-controller system' in Tunnel Mode

The 'config switch-controller system' command on a FortiGate device is used to configure and manage a FortiSwitch when it is managed by the FortiGate. FortiGate can act as a controller for FortiSwitches, allowing centralized management and configuration. This setup is often referred to as FortiLink, where the FortiGate controls multiple FortiSwitches connected to it.

When operating in tunnel mode, device information on switch ports may not be visible. In the example below the tunnel-mode is configured with strict options and the device information is not visible.

Solution:

To ensure that this information is properly displayed, it is necessary to configure the tunnel mode to a compatible mode. This adjustment enables device details to be visible on the switch ports.

In general, the main reason for this behavior is the latest generation of hardware and the latest software version requirements.

Read more about it in our official release notes under any version:

config-switch-controller-system

How to configure it:

On the FortiGate:

config switch-controller system

    set tunnel-mode compatible <----

end

To ensure the FortiSwitch is in Tunnel Mode:

Switch Settings:

config switch-controller managed-switch
    edit <switch-id>

Additional information regarding options:

(system) # set tunnel-mode

compatible <----- Least restrictive. Supports the widest variety of hardware and software versions.

moderate: <----- Moderate level of security. Supports recent generations of hardware and the latest software versions.

strict: <----- Highest level of security. Supports only the latest generation of hardware and the latest software version.

Related document for FortiSwitch:

Optimizing the FortiSwitch network

Related document for FortiGate:

Configuring the FortiLink interface