Use wildcard serial numbers to pre-authorize FortiSwitch units

You can now use asterisks as a wildcard character when you pre-authorize FortiSwitch units. Using a FortiSwitch template, you can name the managed switch and configure the ports. When the FortiSwitch unit is turned on and discovered by the FortiGate device, the wildcard serial number is replaced by the actual serial number and the settings in the FortiSwitch template are applied to the discovered FortiSwitch unit.

When you create the FortiSwitch template, use the following format for the wildcard serial number:

PREFIX****nnnnnn

PREFIX	The first six digits of a valid FortiSwitch serial number, such as S248EP, S124EN, S548DF, and S524DF.
****	Asterisks are the only wildcard characters allowed. You can have any number of asterisks, as long as ****nnnnnn is no longer than 10 characters.
nnnnnn	You can have any number of valid alphanumeric characters, as long as ****nnnnnn is no longer than 10 characters.

To pre-authorize FortiSwitch units using a FortiSwitch template:

1. Create a FortiSwitch template.

   config switch-controller managed-switch

   edit <PREFIX****nnnnnn>

   ...

   next

   end

   For example:

   config switch-controller managed-switch

   edit "S248EP****000000"

   set name "fortilink-FSW248EP1"

   set fsw-wan1-peer "fortilink"

   .......

   config ports

   edit "port1"

   set vlan "onboarding"

   set allowed-vlans "quarantine" "nac_segment"

   set untagged-vlans "quarantine" "nac_segment"

   set access-mode nac

   set export-to "root"

   next

   edit "port2"

   set vlan "_default"

   set allowed-vlans "quarantine"

   set untagged-vlans "quarantine"

   set access-mode dynamic

   set port-policy "aggr1"

   set export-to "root"

   next

   end

   next

   end

2. Turn on the FortiSwitch unit so that the FortiGate device will discover it.

   The FortiSwitch unit is matched with the FortiSwitch template using the order of entries in the CMDB table from top to bottom. The settings in the FortiSwitch template are applied to the discovered FortiSwitch unit. Once a match is made for a wildcard entry, that particular entry is consumed.