Technical Tip: How to Disable PoE on FortiLink Ports

riteshpv · ‎12-27-2024

Description

This article explains the procedure to disable PoE on all FortiLink ports.

Scope

FortiSwitch v7.2 v7.4 v7.6 with FortiGate v7.4 v7.6

Solution

It is recommended to use non-PoE ports or SFP ports to establish links between FortiSwitches.
In specific scenarios where PoE ports must be used for FortiLink, the following steps can be taken to disable PoE on all FortiLink ports.

Solution 1: Disabling PoE on Default Policies.

Verify the Current Configuration: run the following command to check the current configuration:

FortiGate# show full-configuration switch-controller auto-config default

config switch-controller auto-config default
set fgt-policy "default"
set isl-policy "default"
set icl-policy "default-icl"
end

In the above output, the fgt-policy and isl-policy use the 'default' policy, while the icl-policy uses the 'default-icl' policy.

Run the following command to view details of the 'default' and 'default-icl' policies:

FortiGate# show full-configuration switch-controller auto-config policy
config switch-controller auto-config policy
edit "default"
set qos-policy "default"
set storm-control-policy "auto-config"
set poe-status enable
set igmp-flood-report disable
set igmp-flood-traffic disable
next
edit "default-icl"
set qos-policy "default"
set storm-control-policy "auto-config"
set poe-status disable
set igmp-flood-report enable
set igmp-flood-traffic enable
next
end

From the above output:

The 'default' policy has PoE enabled.
The 'default-icl' policy has PoE disabled.

Disable PoE in the Default Policy: run the following commands to disable PoE in the 'default' policy:

FortiGate # config switch-controller auto-config policy
edit "default"
set poe-status disable
next
end

When prompted, type 'y' to confirm:

This policy is currently assigned; disabling of POE status could affect FortiSwitch units which are running in POE powered device mode.
Do you want to continue? (y/n)y

Note:

Ensure that the FortiSwitch is powered by an external power source before disabling PoE.

Solution 2: Creating and Applying a New Policy.

Create a New Policy: run the following commands to create a new policy with PoE disabled:

config switch-controller auto-config policy
edit "no-poe-isl"
set qos-policy "default"
set storm-control-policy "auto-config"
set poe-status disable <======= disable poe
set igmp-flood-report disable
set igmp-flood-traffic disable
next
end

Step 2: Apply the Policy to a Specific FortiLink Trunk.
Run the following commands to apply the new policy to a specific FortiLink trunk:

config switch-controller auto-config custom
edit "_FlInK1_MLAG0_" <==== trunk name
config switch-binding
edit "248EF-3" <==== switch-id
set policy "no-poe-isl"
next
end

After executing the end command, confirm the changes when prompted type y to confirm::

This policy contains disabling of POE status that could affect FortiSwitch units which are running in POE powered device mode.
Do you want to continue? (y/n)y

next
end

Note:

Ensure that the FortiSwitch is powered by an external power source before disabling PoE.

Note:

Replace the FortiLink trunk name with the name of the trunk where PoE needs to be disabled.
To determine the switch ID, run the following command on the FortiGate: 'execute switch-controller get-conn-status'.

Technical Tip: How to Disable PoE on FortiLink Ports

You are leaving our website