Troubleshooting Tip: How to configure FortiSwitch Manager to activate the license via FortiGuard using a Proxy Server

In an air-gapped network where FortiSwitch Manager has no direct internet access, follow the steps below:

1. Access the FortiSwitch Manager web interface from a browser and upload the license file manually.
2. Configure FortiSwitch Manager to use a proxy server for FortiGuard communication by entering the following CLI commands:

FSWMVMTMXXXXXXXX # config system autoupdate tunneling
FSWMVMTMXXXXXXXX (tunneling) # set status enable
FSWMVMTMXXXXXXXX (tunneling) # set address <proxy_address>
FSWMVMTMXXXXXXXX (tunneling) # set port <proxy_port>
FSWMVMTMXXXXXXXX (tunneling) # set username <Username>
FSWMVMTMXXXXXXXX (tunneling) # set password <PASSWORD>
FSWMVMTMXXXXXXXX (tunneling) # end
FSWMVMTMXXXXXXXX #

3. Set up a static route to reach the proxy server:

FSWMVMTMXXXXXXXX # config router static
FSWMVMTMXXXXXXXX (static) # edit 1
FSWMVMTMXXXXXXXX (1) # set static enable
FSWMVMTMXXXXXXXX (1) # set dst <proxy_address> <subnet_mask>
FSWMVMTMXXXXXXXX (1) # set gateway <gateway_address>
FSWMVMTMXXXXXXXX (1) # set device <interface_name>
FSWMVMTMXXXXXXXX (1) # next
FSWMVMTMXXXXXXXX (static) # end
FSWMVMTMXXXXXXXX #

4. Wait approximately 5 minutes, then refresh the browser and log back in to the FortiSwitch Manager to verify the license status.