FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
vpatil
Staff
Staff
Article Id 228262
Description This article describes steps to enable QSFP phy-mode 6x40G on FortiSwitch-1048E to ensure all 6 x QSFP ports are visible on FortiGate.
Scope FortiSwitch-1048E v6.2.x managed by a FortiGate v6.2.x.
Solution

1) Ensure both FortiGate and FortiSwitch are running on minimum v6.2.0 version, because QSFP phy-mode 6x40G is supported starting v6.2.0 version.

2) If FortiGate and FortiSwitch are running on versions older than v6.2.0 version then go to WiFi & Switch Controller -> Managed FortiSwitch and FortiSwitch ports -> QSFP port 53 and port 54 of FortiSwitch-1048E are not visible.

 

However, the other QSFP ports 49-52 on FortiSwitch GUI are visible as shown below:

 

vpatil_0-1666964703894.png

3) Once FortiGate and FortiSwitch-1048E are on v6.2.0 version or higher version, then enable 'phy-mode' port-configuration to '6x40G' on FortiSwitch as shown below:

# config switch phy-mode
    set port-configuration 6x40G
    set port49-phy-mode single-port
    set port50-phy-mode single-port
    set port51-phy-mode single-port
    set port52-phy-mode single-port
    set port53-phy-mode single-port
    set port54-phy-mode single-port
end

 

4) Thereafter, follow the below steps for the new changes to take effect on the FortiSwitch:

- Restart the affected FortiSwitch unit using FortiGate GUI or FortiSwitch CLI command as shown below:

FortiGate GUI:

Got to WiFi & Switch Controller -> Managed Switch, select required FortiSwitch and then select under the drop-down menu hit on 'Restart' button as shown below:

 

vpatil_1-1666964753261.png

 

 

FortiSwitch CLI:

# execute reboot

 

- Remove/Delete FortiSwitch from being managed on FortiGate:

# config switch-controller managed-switch
delete <FortiSwitch_serial_number>

 

- Discover the FortiSwitch.

After deleting the Switch from FortiGate, the FortiSwitch automatically re-discovers FortiGate and shows up under WiFi & Switch Controller -> Managed Switch.

- Authorize the FortiSwitch.

Once the FortiSwitch shows up on FortiGate, thereafter authorize the FortiSwitch by navigating to WiFi & Switch Controller -> Managed Switch, select required FortiSwitch and select ‘Authorize’ button on the FortiSwitch as shown below:

 

vpatil_2-1666964832230.png

 

- Thereafter, all six QSFP phy-mode 6x40G ports of FortiSwitch-1048E are shown under  WiFi & Switch Controller ->  FortiSwitch Ports.

 

vpatil_3-1666964854093.png

 

1) Configuring FortiSwitch split ports (phy-mode) in FortiLink mode – Page #93:
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/a2951442-519d-11e9-94bf-005056...

2) Configuring split ports on a previously discovered FortiSwitch unit – Page #93:
https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/a2951442-519d-11e9-94bf-005056...

3) Refer admin guide - Page #76:

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/b895b007-f1f3-11e9-8977-005056