Troubleshooting Tip: Standalone FortiSwitch shows up on FortiGate as a managed FortiSwitch

[anarra]

Description

This article describes how to fix an issue where a standalone FortiSwitch shows up on FortiGate as a managed FortiSwitch.

Scope

FortiSwitch, FortiGate.

Solution

If there are two standalone FortiSwitches which appearing as managed FortiSwitches on FortiGate, follow the steps in this article on how to mitigate that. This also applies for a managed FortiSwitch which is being managed on a different FortiGate. 

1. The LLDP profile on the uplink switch-port should be set to 'default'.

config switch physical-port

edit "port10"

        set lldp-profile "default "

        set speed auto

next

end

2. If the FortiSwitch is completely standalone, make sure auto-network is disabled. Ignore this step if the FortiSwitch is being managed on a different FortiGate.

config switch auto-network

    set mgmt-vlan 4094

    set status enable  <- Set this to disable.

end

3. A VLAN configured for the port should have 'security fabric-connection' disabled.