Skip to main content
Gumo
Explorer II
July 12, 2024
Question

Fortilink 3rd Party Switch L2

  • July 12, 2024
  • 12 replies
  • 7612 views

I want to configure FortiLink over a point-to-point layer-2 network for connection to FortiGate Firewall and Cisco BB (Backbone). I need to connect FortiSwitch via Cisco BB. I'request support on how I can perform this configuration.

The environment have: Fortigate > Cisco BB > FortiSwitchfor(1).png

 

 

12 replies

ozkanaltas
Valued Contributor III
July 12, 2024

Hello @Gumo ,

 

If you want to manage your FortiSwitch via FortiGate, you just need to configure 4094 vlan on the Cisco switch. FortiSwitch uses 4094 vlan for management and tunnel. After that configuration, FortiGate can discover FortiSwitch and manage it.

 

Also, there are different options. For these options, you can review these documents.

 

https://docs.fortinet.com/document/fortiswitch/7.2.1/fortilink-guide/801183/fortilink-over-a-point-to-point-layer-2-network

 

https://docs.fortinet.com/document/fortiswitch/7.2.1/fortilink-guide/801182/fortilink-mode-over-a-layer-3-network

 

 

Gumo
GumoAuthor
Explorer II
July 12, 2024

I cannot pass 4094 vlan through the switch, I think I will have to change to Fortilink 4094 vlan.

ozkanaltas
Valued Contributor III
July 12, 2024
browners80
New Member
February 8, 2025

Been labing several topologies this weekend and finally got the L3 working.  Turned out my old 3550 Cisco  switch could not handle VLANs above 1K do had to change the default Fortilink management vlan.

sachitdas_FTNT
Staff
Staff
February 16, 2025

Thats correct, p2p is not possible in this design. p2p means FGT-FSW-cisco-FSW.
https://docs.fortinet.com/document/fortiswitch/7.6.1/fortilink-guide/801183/fortilink-over-a-point-to-point-layer-2-network

 

Fortilink over layer3 is the correct approach.

browners80
New Member
February 8, 2025

.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!