I am trying to connect a Fortiswitch 124F to a cisco switch and would like to know the basic steps.
The cisco switch would be the gateway for the fortiswitch and would issues IP addresses in VLAN 5 - 10.1.5.x.
To connect a FortiSwitch 124F to a Cisco 3850 switch, follow these basic steps:
Physical Connection: Connect an Ethernet cable from an available port on the Cisco 3850 to an available port on the FortiSwitch 124F.
VLAN Configuration: On the Cisco 3850, create the VLANs (VLAN 5) and configure the interface VLAN (SVI) for each VLAN with the corresponding IP addresses (e.g., VLAN 5 - 10.1.5.x).
Trunk Configuration: On the Cisco switch port connected to the FortiSwitch, configure it as a trunk port to allow the passage of multiple VLANs.
FortiSwitch Configuration: Access the FortiSwitch's management interface. Configure the ports you want to use as access ports for the desired VLANs. Assign VLAN IDs to these ports and set the appropriate IP addresses for each VLAN interface.
Gateway Configuration: On the Cisco switch, make sure the VLAN SVIs are configured as gateways for the respective VLANs (e.g., VLAN 5).
Routing: If necessary, configure routing on the Cisco 3850 to allow communication between different VLANs.
Testing: Test connectivity by connecting devices to the configured VLAN ports on the FortiSwitch and verifying that they can communicate within their respective VLANs and access the gateway.
Remember to ensure that both switches have compatible settings for VLAN tagging and trunking, and that there are no security or access-list configurations that might block the communication between the switches or VLANs.
The Cisco switch has a trunk port and I want to connect it to port 24 on the Fortiswitch. My understanding is that I don't have to set that port as a trunk port on the Fortiswitch, but rather just allow the correct vlans.
Yes thats correct, you need to configure the native and allowed vlans on port24
Am I to add VLANS at interface level or a switch level?
Hope this helps:
In FSW version 7.2 and above, we have "auto-network" configuration, so if you are using standalone mode, then we should disable this.
config switch auto-network
set mgmt-vlan <1-4094>
set status disable
end
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1741 | |
1109 | |
755 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.