Fortinet white logo
Fortinet white logo

Administration Guide

FortiLink auto network configuration policy

FortiLink auto network configuration policy

The switch controller has a network auto-config option which contains configurable defaults, policy customization, and an individual interface override. This gives administrators simple and flexible control.

Following is a description of these options:

auto-config default Provides the default actions for the first hop (fgt-policy) and lower-tier devices (isl-policy).
auto-config policy A database containing policies that can be applied as a system-wide default or to a specific interface.
auto-config custom Allows for the override of the auto-config default on a specific interface. This information is retained and is reapplied if an interface leaves and then is rediscovered.
To configure automatic network detection:
  1. Create or modify an auto-config policy:
    config switch-controller auto-config policy
        edit "test123"
            set qos-policy default      --------> leverage the default qos-policy
            set storm-control-policy auto-config      --------> leverage auto-config storm-control-policy by default
            set poe-status enable      --------> If target of auto-config is poe port, keep poe-status enabled by default
        next
    end
  2. Designate the default auto-config policy to FortiLink, ISL, or ICL on managed FortiSwitch devices:
    config switch-controller auto-config default
        set fgt-policy test123
        set isl-policy test123
        set icl-policy test123
    end
  3. Customize an auto-config policy for a specific FGT, ICL, or ISL interface.
    config switch-controller auto-config custom
        edit "G5H0E391790XXXX"
            config switch-binding
                edit "S524DN4K1500XXXX"
                    set policy <policy>
                next
            end
        next
    end

FortiLink auto network configuration policy

FortiLink auto network configuration policy

The switch controller has a network auto-config option which contains configurable defaults, policy customization, and an individual interface override. This gives administrators simple and flexible control.

Following is a description of these options:

auto-config default Provides the default actions for the first hop (fgt-policy) and lower-tier devices (isl-policy).
auto-config policy A database containing policies that can be applied as a system-wide default or to a specific interface.
auto-config custom Allows for the override of the auto-config default on a specific interface. This information is retained and is reapplied if an interface leaves and then is rediscovered.
To configure automatic network detection:
  1. Create or modify an auto-config policy:
    config switch-controller auto-config policy
        edit "test123"
            set qos-policy default      --------> leverage the default qos-policy
            set storm-control-policy auto-config      --------> leverage auto-config storm-control-policy by default
            set poe-status enable      --------> If target of auto-config is poe port, keep poe-status enabled by default
        next
    end
  2. Designate the default auto-config policy to FortiLink, ISL, or ICL on managed FortiSwitch devices:
    config switch-controller auto-config default
        set fgt-policy test123
        set isl-policy test123
        set icl-policy test123
    end
  3. Customize an auto-config policy for a specific FGT, ICL, or ISL interface.
    config switch-controller auto-config custom
        edit "G5H0E391790XXXX"
            config switch-binding
                edit "S524DN4K1500XXXX"
                    set policy <policy>
                next
            end
        next
    end