Discovering Fortiswitch in Fortigate from a Dell network

[jmhalegre]

Hi Team,

I need help to know how to perform the configuration on the different network elements for the Fortigate to discover the Fortiswitches on Vlan1001. Is it possible?

The scenario is as follows:

Thanks & Best Regards,

Juanmi

[ozkanaltas]

Hello @jmhalegre ,

You can use that topology except for one thing. If you want to use the FortiLink interface on the firewall, you need to use a physical port for FortiLink.

After that, you just need to configure it to pass the 4094 vlan on the Dell switch. Vlan 4094 default FortiLink vlan's. If you want to change this vlan you can use these commands.

config system interface
    edit <fortilink interface>
        set fortilink enable
        set switch-controller-mgmt-vlan <integer>
    next
end

Or you can use FortiLink over Layer 3 network mode. 

https://docs.fortinet.com/document/fortiswitch/7.4.2/fortilink-guide/801182/fortilink-mode-over-a-la...

[jmhalegre]

Hi @ozkanaltas,

One doubt, if we change the Vlan 4094 in FortiGate for vlan 4084, I understand that it will be necessary to make the change in the FortiSwitch as follows:

config switch auto-network
set mgmt-vlan 4084
set status enable
end

config switch global
fortilink-p2p-native-vlan 4084

and in the Dell create the Vlan 4084 and pass it tagged by the Trunk, correct?

I understand, that the interface that I must connect to the Dell Switch "Fortigate Port A to Switch Dell" for the discovery of the switches, must be the interface "Fortilink // Dedicated to Fortiswitch"?

The scenario would look like this:

Thanks & Best Regards,

Juanmi

[ozkanaltas]

Hello @jmhalegre ,

This configuration should work except for one thing. You need to configure 4084 vlan on Dell eth1/1/12 port.

Also, In my opinion, you don't need a p2p configuration. You can try both scenarios. 

[jmhalegre]

Perfect!!!!!,

Thanks for the info, on Monday I will do some tests and I will let you know the results.

Thanks & Best Regards,

Juanmi