Technical Tip: FortiSwitch Auto-Discovery and Authorization

[sachitdas_FTNT]

Description	This article describes the process of FortiSwitch Auto-Discovery and Authorization on FortiGate.
Scope	FortiGate, Managed FortiSwitches.
Solution	FortiSwitch sends FortiLink discovery frames. FortiGate adds FortiSwitch configuration to FortiOS (FortiSwitch status is Unauthorized). The administrator authorizes the switch on the FortiGate GUI (FortiSwitch status changes to Offline). FortiGate sends a FortiLink frame to the switch to notify the authorization. FortiSwitch saves the standalone configuration and changes it to the default FortiLink configuration.                                           FortiSwitch changes to FortiLink mode and: Creates a FortiLink trunk using auto-ISL. Starts exchanging FortiLink heartbeats with FortiGate (health check). FortiSwitch obtains network parameters through DHCP. FortiGate adds an A record to its DNS database for the switch. FortiSwitch uses NTP to sync its time with FortiGate. FortiSwitch brings up the CAPWAP tunnel (FortiSwitch status changes to Online). FortiGate pushes the configuration to FortiSwitch using FortiSwitch REST API (HTTPS). Related documents: Technical Tip: Management Protocols for FortiSwitch discovery on FortiGate Technical Tip: FortiLinkd process on FortiSwitch Technical Tip: Managed FortiSwitch Capwap discovery process Technical Tip: Managed FortiSwitch default configuration of inter switch link fortilink trunk, mclag... FortiSwitch management