Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Keeran
New Contributor

FortiSwitch Sections explained

Can anyone explain me what can be done under:

  1. System > Network > Interface > Physical
  2. System > Network > Interface > VLAN
  3. Switch > Port > Physical
  4. Switch > Interface > Physical
  5. Switch > VLAN 

I tried to understand it, but couldn't. Thankyou for any help.

1 Solution
saneeshpv_FTNT

System > Network > Interface > Physical - This is a Physical Interface/Port on the FortiSwitch. You can assign IP address to a Physical interface for managing the FortiSwitch (Static or DHCP)

 

System > Network > Interface > VLAN - This is SVI - A Logical L3 Interface created under a Physical Interface, You can assign IP address and VLAN ID here. You can create multiple SVIs with different Subnet and VLAN IDs under the same Physical Interface. This make FortiSwitch as an L3 device with Gateway on the FortiSwitch

 

Switch > Port > Physical - This configuration section is to define the FortiSwitch Physical ports (Layer 2) specfic settings like "Link Speed, Frame Size, Admin Status, PPPOE Settings, Frame Size etc.
config switch physical-port
edit <port_name>
set status {up | down}
set description <string>
set max-frame-size <bytes_int>
set speed {1000auto | 100full | 100half | 10full | 10half | auto | 10000cr | 10000full | 10000sr | 1000full | auto-module}
set poe-status {enable | disable}
next
end

 

 

Switch > Interface > Physical - This configuration section is to define the FortiSwitch Physical port specfic Layer 2 settings like Native VLAN, Allowed VLAN's, Port Security, MAB & other L2 security settings like BPDU Guard, Root Guard, Loop Protection,.

config switch interface
edit port30
set stp-state enabled
set edge-port enabled
set stp-bpdu-guard enabled
set stp-bpdu-guard-timeout 60
next
end

 

Switch > VLAN - This is where you create all your VLANs

View solution in original post

2 REPLIES 2
saneeshpv_FTNT

System > Network > Interface > Physical - This is a Physical Interface/Port on the FortiSwitch. You can assign IP address to a Physical interface for managing the FortiSwitch (Static or DHCP)

 

System > Network > Interface > VLAN - This is SVI - A Logical L3 Interface created under a Physical Interface, You can assign IP address and VLAN ID here. You can create multiple SVIs with different Subnet and VLAN IDs under the same Physical Interface. This make FortiSwitch as an L3 device with Gateway on the FortiSwitch

 

Switch > Port > Physical - This configuration section is to define the FortiSwitch Physical ports (Layer 2) specfic settings like "Link Speed, Frame Size, Admin Status, PPPOE Settings, Frame Size etc.
config switch physical-port
edit <port_name>
set status {up | down}
set description <string>
set max-frame-size <bytes_int>
set speed {1000auto | 100full | 100half | 10full | 10half | auto | 10000cr | 10000full | 10000sr | 1000full | auto-module}
set poe-status {enable | disable}
next
end

 

 

Switch > Interface > Physical - This configuration section is to define the FortiSwitch Physical port specfic Layer 2 settings like Native VLAN, Allowed VLAN's, Port Security, MAB & other L2 security settings like BPDU Guard, Root Guard, Loop Protection,.

config switch interface
edit port30
set stp-state enabled
set edge-port enabled
set stp-bpdu-guard enabled
set stp-bpdu-guard-timeout 60
next
end

 

Switch > VLAN - This is where you create all your VLANs

Toshi_Esumi
SuperUser
SuperUser

As @saneeshpv_FTNT, explained CLI is more easier to understand the structure of FortiSwitch config, if you know FortiGate's CLI structure.

Just to reiterate,

  • config system interface - mostly L3 config of interfaces
  • config switch interface - L2 config of interfaces
  • config switch physical-port - L2/L1 config of interfaces

 

Toshi

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors