Technical Tip: Auto-stp-priority

Description
This article describes when it is recommended to disable auto-stp-priority.

Solution
If the FortiSwitch is managed by FortiGate and there is a need to overwrite the priority of the FortiSwitch then it is possible to disable the auto-stp-priority on that particular FortiSwitch.

config switch global
    set auto-stp-priority disable
end

It is possible to push this same config from FortiGate using a custom command:

config switch-controller custom-command
    edit "test"
        set description ''
        set command "config switch global %0a set auto-stp-priority disable %0a end %0a"
    next
end

To apply the custom command to a specific FortiSwitch.

config switch-controller  managed-switch
    edit S448DFXXXXXXXX
        config custom-command
            edit "1"
                set command-name "test"
            next

Verify the config is reflected in the FortiSwitch by using the command directly on the FortiSwitch:

show full switch global
# config switch global
    set auto-isl enable
    set auto-isl-port-group 0
    set auto-stp-priority disable                         <-----
    set dhcp-snooping-database-export disable
end

Related articles:

Technical Tip: Configure STP priority using 'custom-command 'on FortiGate