Technical Tip: How to add/connect FortiSwitch to FortiGate on any interface

[lgupta]

Description

This article describes the configuration requirements on FortiGate to connect the FortiSwitch to FortiGate's physical interface and manage it.

Scope

FortiGate.

Solution

Any interface can be used for the FortiLink connection, not just the default interface on new configuration.

In order to use an arbitrary interface for FortiLink, follow these steps:

1. Create a new interface, set the type to '802.3ad Aggregate' and add the physical interface(s) as members.

2. Assign an IP and subnet to this interface. It should not be a /32, as an IP is needed on each switch for management. Save the changes.
3. In order to make this a FortiLink interface, a CLI change is needed. Edit the new interface, and select 'Edit in CLI'.
   Run 'set fortilink enable', and ensure the configuration is similar to the one seen below:
   
   

config system interface

    edit "LAG-Interface"

        set ip 10.255.2.1 255.255.255.0   <----- IP Assigned with /24.

        set fortilink enable   <-----   FortiLink is enabled.

        set allowaccess ping fabric

        set type aggregate  

        set member "internal1" <----- Internal1 is a member of this aggregate interface.

    end

Once done, ensure the changes are saved by running 'end' in the open CLI window. It is now safe to close the CLI window.

4. Once FortiLink has been enabled in the above step, multiple VLAN interfaces are automatically created under LAG-interface. Do not delete these.
5. Make sure that DHCP is enabled for the 'LAG-interface'. FortiSwitch will grab IP from this scope and this IP is explicitly for the management of the FortiSwitch.
6. Select Advanced under DHCP settings and select LOCAL for NTP Server.

LAG-interface settings

7. Ensure that the new interface is selected to listen for NTP under System -> Settings.

 

8. Now, connect the FortiSwitch to the physical interface chosen (internal1 here) as a member of the LAG-interface.
9. Wait around 2 minutes and the FortiSwitch will be visible in Managed FortiSwitches. Authorize the device under Wireless and Switch Controller -> Managed FortiSwitches, 'right-click' on the FortiSwitch, and Authorize.
10. Wait for 5-10 minutes and confirm if the device comes online.
    
    

After Authorizing the FortiSwitch

11. If the FortiSwitch is still showing as offline, reboot the FortiSwitch and monitor.

Related article:

Troubleshooting Tip: Fix FortiSwitch showing with the 'Offline' status