Managed FortiSwitch IP through FortiLink

FortiSwitch

FortiSwitch: secure, simple and scalable Ethernet solutions

Article Id 295436

Description

This article discusses the FortiLink interface IP setting on FortiGate in different scenarios.

Scope

FortiSwitch.

Solution

In the first scenario, there are layer-2 FortiLink setup. When Fortiswitch directly connects to FortiGate in FortiLink mode then it is possible to configure following setting:

config system interface
edit "fortilink"
set vdom "vdom1
set fortilink enable
set switch-controller-source-ip outboud <----- Default config.
set ip 169.254.1.1 255.255.255.0
set allowaccess ping fabric
set type aggregate
set member "port7"
...
next
end

This means the source IP address for the devices connecting to FortiGate is the outbound interface.

In the second scenario, there is a third-party switch/router/radio in between the FortiGate and FortiSwitch. In a remote location, it is possible to configure below setting:

config system interface
edit "fortilink"
set vdom "vdom1"
set fortilink enable
set switch-controller-source-ip fixed
set ip 169.254.1.1 255.255.255.0
set allowaccess ping fabric
set type aggregate
set member "port7"
...
next
end

This means the devices can connect over layer-3 FortiLink to use source IP as FortiLink IP.

1933

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: Managed FortiSwitch IP through FortiLink

You are leaving our website