Skip to main content
Epsilon
Epsilon
New Member
February 26, 2025
Question

Fortiswitch configuration after management change

  • February 26, 2025
  • 2 replies
  • 1236 views

If I follow the suggested steps below to remove my switches from management prior to exchanging the fortigate appliance, can someone please clarify what happens to the switch configuration? I've seen references to Fortigate specific items being deleted but can't find a definitive answer about the config in general.  Trying to prepare for and avoid potential disaster when we change management.  Thanks.

 

On the root FortiGate, go to Security Fabric -> Fabric Connectors.
In the topology tree, click on the FortiSwitch device you want to remove.
Select the option to Deauthorize the device.

2 replies

Stephen_G
Moderator
Stephen_G
Moderator
March 2, 2025

Hello,

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Stephen_G - Fortinet Community Team
hokelgo2
hokelgo2
New Member
March 2, 2025

I forgot to emphasize this, FortiOS is pretty smart, so it will remember the ISL UNLESS you manually delete it. The first time I had to do it, it took me a while. They are saved in the switch on the physical port configuration and the trunk it creates. It is not hard to do, but it wasn't fully intuitive to me the first time, and during a test we connected multiple cables and later things were not working lol. Because I was trying to connect a different switch in the same port. Doing a reset will not fully remove it because a trunk is defined on both ends.

Epsilon
EpsilonAuthor
New Member
March 3, 2025

Is the ISL the inter-switch link.  I'm not a FortiOS guy, so the idea of having a specific configuration on ports for this type of "magic" and not simply having a trunk port with native and tagged VLANs is foreign to me.  When I deauthorize, the link stays in the switch I take it and will not simply allow me to connect to another device that isn't another fortiswitch or fortigate?

Terms & ConditionsAccessibility statement