Skip to main content
chami
Explorer
October 3, 2024
Solved

Creating Fortilink 802.3ad send DHCP for switches but not access points connect down stream ports

  • October 3, 2024
  • 4 replies
  • 1548 views

I have created Fortlink with dedicate to Fortiswitch checked. I setup internal DHCP and connected POE switch with Access Point. I am getting DHCP management address to switches but not getting DHCP from downstream port where access point is plugged in. There is no way to tag Fortilink interface in any downstream switch port unless I create interface type vlan. 

My question is, is there any way to use Fortilink as management vlan to provide DHCP for switches and DHCP also for  access points only using Fortilink rather creating a separate interface type vlan under Fortilink and add downstream switchports to it. I would like to know if this is possible. 

 

 

Best answer by ebilcari

A dedicated VLAN for AP management is required. Even if the downstream port is assigned to the Fortilink subnet, the DHCP will not offer an IP:
set vci-match enable
set vci-string "FortiSwitch" "FortiExtender"

4 replies

ebilcari
Staff
ebilcariAnswer
Staff
October 3, 2024

A dedicated VLAN for AP management is required. Even if the downstream port is assigned to the Fortilink subnet, the DHCP will not offer an IP:
set vci-match enable
set vci-string "FortiSwitch" "FortiExtender"

Emirjon
chami
chamiAuthor
Explorer
October 3, 2024

Once I create a separate vlan, I have to put those two commands in it so that vendor class identification matches and provide DHCP ? 

ebilcari
Staff
Staff
October 3, 2024

No it's not needed, this commands are from the Fortilink DHCP server configuration that is dedicated to FSW and FEX. The AP are treated more like standard hosts, all steps are shown on this article.

Emirjon
chami
chamiAuthor
Explorer
October 3, 2024

Thank You. 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!