Technical Tip: 'dynamic-capability' flag on Managed FortiSwitch

For any managed FortiSwitch, when we execute the below command on the FortiGate, it is possible to see this field called 'dynamic-capability'.

This parameter shows what features switch supports and its non-configurable value.

The value differs for switch model, it is not possible to change the value.

FG200E (root) # show switch-controller managed-switch S248EF
# config switch-controller managed-switch
    edit "S248EF"
        set name "core2"
        set fsw-wan1-peer "fortilink"
        set fsw-wan1-admin enable
        set poe-detection-type 2
        set version 1
        set max-allowed-trunk-members 8
        set dynamic-capability 0x0000000000000000000027757dddbff7

FG200E(root) # config switch-controller managed-switch

FG200E (managed-switch) edit S248EF

FG200E (S248EF) get
.

.

dynamic-capability : igmp-snooping,dhcp-snooping,mclag,qos,network-monitoring,sticky-mac,netflow-ipfix,per-port-storm-control,erspan,rspan,lldp-vlan-assignment,quarantine,source-guard,bounce-port,lldpmed,dot1x,access-vlan,bulk-stage,bpdu-guard,stp-root-guard,port-mac-limit,sflow,acl,vlan-policer-qos,led-diag-flash,igmp-snoop-proxy,aggregator-mode,self-sign,dot1x-auth-server-timeout,nac,dsl,lan-segment,