FortiSwitch
FortiSwitch: secure, simple and scalable Ethernet solutions
sachitdas_FTNT
Article Id 194869

Description

 

This article describes configuring IP parameters on an out-of-box standalone FortiSwitch to make it reachable to the network.
 
For further information, please visit Fortinet Documentation here.


Solution


Before configuring the FortiSwitch, please refer standalone FortiSwitch guide here.

The following is the configuration of out of box switch:

Internal interface has native vlan 4094 and all the ports have native vlan1.

Supposing that connecting port1 to the uplink router/switch, and that uplink device is configured for native vlan 10 and to get the switch ip from vlan10. Configure switch internal interface and port1 for native vlan10.

Take the management OR console access to configure below parameters from CLI.

config switch interface
    edit internal
        set native-vlan 10
    next
    edit port1
        set native-vlan 10
end


Configure the internal interface either with static IP or DHCP as follows:

config system interface
    edit internal
        set mode dhcp/static          <-- The internal interface can be configure with either static IP or DHCP

 - For static:

set ip <ip address> <subnet mask>
    set allowaccess ping https http ssh snmp telnet radius-acct
end


 - For static route:

config router static
    edit 1
        set device "internal"
        set dst 0.0.0.0 0.0.0.0
        set gateway <ip address of the gateway x.x.x.x>
    next
end

After the configuration is done, the switch is now reachable to the network.

get router info routing-table details

S>*  0.0.0.0/0 [5/0] via x.x.x.x, internal

get system arp
Address           Age(min)       Hardware Addr         Interface
x.x.x.x             0          xx:xx:xx:xx:xx:xx        internal

execute ping <gateway_IP>


Note: Same can be configured via Switch GUI if management access to the FortiSwitch is available. By default, the management IP is
192.168.1.99/24