Connect FortiSwitch 1048E to Fortigate 500E

[it-abteilung]

Hi all,

I have a large LAN ReDesign Project. I will Change all Aruba Switches, which are EOL to new FortiSwitches. With this Change I will Change the IP-Subnets, too. My Concept is, that all FortiSwitches get a own VLAN. For CoreSwitch I choosed a FortiSwitch 1048E, which I connected to the free 10 GBit/s X2 Port on the Fortigate. So I configured the X2 Port with the following IP-Config:

10.100.99.1 / 24

Receive LLDP: Enable

Transmit LLDP: Enable

Administrative Access: HTTPS, SSH, PING, FMG-Access, FTM, Security Fabric Connection

I configured the FS1048E with the IP-Adress 10.100.99.2 / 24. I leaved a small Config first time. I connected the FS1048E on the X2 Port of Fortigate, but I can´t reach the FS1048E. Administrative Access on the FS is HTTPS, SSH, PING. I tried to ping the Fortigate from CLI of FS1048E but I can´t reach it. I tried to ping the FS1048E from Fortigate CLI and can´t reach the FS1048E, too. Normally it is an easy job, but in this time I don´t understand an I don´t find the problem. I only configured the IP-Config on the FortiSwitch for the first time to check the network connectivity, there is nothing else configured on the switch. I resetted the Switch for 5 times but no affect.

For your Information: I don´t want to use Fortilink and manage all switches over the Fortigate. This is no solution for me. We want to manage all switches as Standalone and configure them over their own internal interface.

Can you help me please? Do you need more / detailed information?

Thanks a lot

Kurt

[Jean-Philippe_P]

Hello Kurt, 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks, 

[sjoshi]

Hi,

You may refer below article for standalone switches:-

https://community.fortinet.com/t5/FortiSwitch/Technical-Tip-Good-practices-for-a-standalone-FortiSwi...

Also you have setup 10.100.99.2 / 24 on the FSW.

diag ip address list >> run this cmd on both FGT and FSW to verify the interface IP setup

Also packet capture can be taken on FGT and FSW to see if the traffic is received and reply is being sent out