Skip to main content
jmhalegre
jmhalegre
New Member
May 24, 2024
Question

Discovering Fortiswitch in Fortigate from a Dell network

  • May 24, 2024
  • 1 reply
  • 2647 views

Hi Team,

 

I need help to know how to perform the configuration on the different network elements for the Fortigate to discover the Fortiswitches on Vlan1001. Is it possible?

 

The scenario is as follows:

 

FortiGate_Dell_Fortiswitch.jpg

 

 

Thanks & Best Regards,

Juanmi

1 reply

ozkanaltas
ozkanaltas
Valued Contributor III
May 24, 2024

Hello @jmhalegre ,

 

You can use that topology except for one thing. If you want to use the FortiLink interface on the firewall, you need to use a physical port for FortiLink.

 

After that, you just need to configure it to pass the 4094 vlan on the Dell switch. Vlan 4094 default FortiLink vlan's. If you want to change this vlan you can use these commands.

 

 

config system interface     edit <fortilink interface>         set fortilink enable         set switch-controller-mgmt-vlan <integer>     next end

 

Or you can use FortiLink over Layer 3 network mode. 

 

https://docs.fortinet.com/document/fortiswitch/7.4.2/fortilink-guide/801182/fortilink-mode-over-a-layer-3-network

 

 

    jmhalegre
    jmhalegreAuthor
    New Member
    May 24, 2024

    Hi @ozkanaltas,

     

    One doubt, if we change the Vlan 4094 in FortiGate for vlan 4084, I understand that it will be necessary to make the change in the FortiSwitch as follows:

     

    config switch auto-network
    set mgmt-vlan 4084
    set status enable
    end

     

    config switch global
    fortilink-p2p-native-vlan 4084

     

    and in the Dell create the Vlan 4084 and pass it tagged by the Trunk, correct?

     

    I understand, that the interface that I must connect to the Dell Switch "Fortigate Port A to Switch Dell" for the discovery of the switches, must be the interface "Fortilink // Dedicated to Fortiswitch"?

     

    The scenario would look like this:

     

    FortiGate_Dell_Fortiswitch.jpg

     

    Thanks & Best Regards,

    Juanmi

     

    ozkanaltas
    ozkanaltas
    Valued Contributor III
    May 24, 2024

    Hello @jmhalegre ,

     

    This configuration should work except for one thing. You need to configure 4084 vlan on Dell eth1/1/12 port.

     

    Also, In my opinion, you don't need a p2p configuration. You can try both scenarios. 

      Terms & ConditionsAccessibility statement