FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
bstefanovski
Staff
Staff
Article Id 349922
Description

This article describes how to see device information under 'config switch-controller system' in Tunnel Mode.

Scope FortiGate.
Solution

The 'config switch-controller system' command on a FortiGate device is used to configure and manage a FortiSwitch when it is managed by the FortiGate. FortiGate can act as a controller for FortiSwitches, allowing centralized management and configuration. This setup is often referred to as FortiLink, where the FortiGate controls multiple FortiSwitches connected to it.

 

When operating in tunnel mode, device information on switch ports may not be visible. In the example below the tunnel-mode is configured with strict options and the device information is not visible.

 

Untitled picture.png

 

Solution:

To ensure that this information is properly displayed, it is necessary to configure the tunnel mode to a compatible mode. This adjustment enables device details to be visible on the switch ports.

 

In general, the main reason for this behavior is the latest generation of hardware and the latest software version requirements.

 

Read more about it in our official release notes under any version:

config-switch-controller-system

 

How to configure it:

 

On the FortiGate:

 

config switch-controller system

    set tunnel-mode compatible <----

end

 

To ensure the FortiSwitch is in Tunnel Mode:

Switch Settings:

 

config switch-controller managed-switch
    edit <switch-id>


Additional information regarding options:

 

(system) # set tunnel-mode

compatible <----- Least restrictive. Supports the widest variety of hardware and software versions.

moderate: <----- Moderate level of security. Supports recent generations of hardware and the latest software versions.

strict: <----- Highest level of security. Supports only the latest generation of hardware and the latest software version.



Related document for FortiSwitch:

Optimizing the FortiSwitch network

 

Related document for FortiGate:

Configuring the FortiLink interface