Technical Tip: Managed FortiSwitch IP through FortiLink

1. In the first scenario, there are layer-2 FortiLink setup. When Fortiswitch directly connects to FortiGate in FortiLink mode then it is possible to configure following setting:

config system interface
    edit "fortilink"
        set vdom "vdom1
        set fortilink enable
        set switch-controller-source-ip outboud <----- Default config.
       set ip 169.254.1.1 255.255.255.0
       set allowaccess ping fabric
       set type aggregate
       set member "port7"
       ...
    next
end

This means the source IP address for the devices connecting to FortiGate is the outbound interface.

2. In the second scenario, there is a third-party switch/router/radio in between the FortiGate and FortiSwitch. In a remote location, it is possible to configure below setting:

config system interface
    edit "fortilink"
        set vdom "vdom1"
        set fortilink enable
        set switch-controller-source-ip fixed
        set ip 169.254.1.1 255.255.255.0
        set allowaccess ping fabric
        set type aggregate
        set member "port7"
        ...
    next
end

This means the devices can connect over layer-3 FortiLink to use source IP as FortiLink IP.