FortiLink through 3rd party L2 switch

[AEK]

Hello

The following doc shows that FortiLink is supported is this topology:

FortiGate <---> FortiSwitch <---> 3rd party L2 switch <---> FortiSwitch

https://docs.fortinet.com/document/fortiswitch/7.0.8/devices-managed-by-fortios/801183

My question is more simple: is FortiLink supported in the following case?

FortiGate <---> 3rd party L2 switch <---> FortiSwitch

[Bjay_Prakash_Ghising]

Hi @AEK  

A simple answer is yes. It is possible to manage FortiSwitch if there is a third-party L2 switch between them. 

The last time I attempted such topology was a year ago. Cisco was in between FortiGate and FortiSwitch.

If I remember the configuration correctly.

Then it was easily achievable when there was a single port within the Fortilink. (Considering Cisco in the default configuration).  

But when there were two ports inside Fortilink then we had to create LAG (channel-group in my case) between FortiGate and FortiSwitch. 

Note that,

- for a single port within the FortiLink. I didn't check the VLAN trunking, just tested whether it could be managed or not. I guess, you might need a trunk port connected between them.

- But for two ports inside Fortilink, we trunked VLAN through port-channel.

Overall, you can manage over a third-party L2 switch. But for precise verification of VLAN trunking traffic flow, I need to test them again.

Hope that helps,

Kind Regards,
Bijay Prakash Ghising

[AEK]

Thanks Bijay for your detailed response and for sharing your experience.

I'll share the result of my lab once I achieve it successfully.