Version:

Version:


Table of Contents

New Features

Download PDF
Copy Link

Use wildcard serial numbers to pre-authorize FortiSwitch units

You can now use asterisks as a wildcard character when you pre-authorize FortiSwitch units. Using a FortiSwitch template, you can name the managed switch and configure the ports. When the FortiSwitch unit is turned on and discovered by the FortiGate device, the wildcard serial number is replaced by the actual serial number and the settings in the FortiSwitch template are applied to the discovered FortiSwitch unit.

When you create the FortiSwitch template, use the following format for the wildcard serial number:

PREFIX****nnnnnn

PREFIX

The first six digits of a valid FortiSwitch serial number, such as S248EP, S124EN, S548DF, and S524DF.

****

Asterisks are the only wildcard characters allowed. You can have any number of asterisks, as long as ****nnnnnn is no longer than 10 characters.

nnnnnn

You can have any number of valid alphanumeric characters, as long as ****nnnnnn is no longer than 10 characters.

To pre-authorize FortiSwitch units using a FortiSwitch template:
  1. Create a FortiSwitch template.

    config switch-controller managed-switch

    edit <PREFIX****nnnnnn>

    ...

    next

    end

    For example:

    config switch-controller managed-switch

    edit "S248EP****000000"

    set name "fortilink-FSW248EP1"

    set fsw-wan1-peer "fortilink"

    .......

    config ports

    edit "port1"

    set vlan "onboarding"

    set allowed-vlans "quarantine" "nac_segment"

    set untagged-vlans "quarantine" "nac_segment"

    set access-mode nac

    set export-to "root"

    next

    edit "port2"

    set vlan "_default"

    set allowed-vlans "quarantine"

    set untagged-vlans "quarantine"

    set access-mode dynamic

    set port-policy "aggr1"

    set export-to "root"

    next

    end

    next

    end

  2. Turn on the FortiSwitch unit so that the FortiGate device will discover it.

    The FortiSwitch unit is matched with the FortiSwitch template using the order of entries in the CMDB table from top to bottom. The settings in the FortiSwitch template are applied to the discovered FortiSwitch unit. Once a match is made for a wildcard entry, that particular entry is consumed.

Use wildcard serial numbers to pre-authorize FortiSwitch units

You can now use asterisks as a wildcard character when you pre-authorize FortiSwitch units. Using a FortiSwitch template, you can name the managed switch and configure the ports. When the FortiSwitch unit is turned on and discovered by the FortiGate device, the wildcard serial number is replaced by the actual serial number and the settings in the FortiSwitch template are applied to the discovered FortiSwitch unit.

When you create the FortiSwitch template, use the following format for the wildcard serial number:

PREFIX****nnnnnn

PREFIX

The first six digits of a valid FortiSwitch serial number, such as S248EP, S124EN, S548DF, and S524DF.

****

Asterisks are the only wildcard characters allowed. You can have any number of asterisks, as long as ****nnnnnn is no longer than 10 characters.

nnnnnn

You can have any number of valid alphanumeric characters, as long as ****nnnnnn is no longer than 10 characters.

To pre-authorize FortiSwitch units using a FortiSwitch template:
  1. Create a FortiSwitch template.

    config switch-controller managed-switch

    edit <PREFIX****nnnnnn>

    ...

    next

    end

    For example:

    config switch-controller managed-switch

    edit "S248EP****000000"

    set name "fortilink-FSW248EP1"

    set fsw-wan1-peer "fortilink"

    .......

    config ports

    edit "port1"

    set vlan "onboarding"

    set allowed-vlans "quarantine" "nac_segment"

    set untagged-vlans "quarantine" "nac_segment"

    set access-mode nac

    set export-to "root"

    next

    edit "port2"

    set vlan "_default"

    set allowed-vlans "quarantine"

    set untagged-vlans "quarantine"

    set access-mode dynamic

    set port-policy "aggr1"

    set export-to "root"

    next

    end

    next

    end

  2. Turn on the FortiSwitch unit so that the FortiGate device will discover it.

    The FortiSwitch unit is matched with the FortiSwitch template using the order of entries in the CMDB table from top to bottom. The settings in the FortiSwitch template are applied to the discovered FortiSwitch unit. Once a match is made for a wildcard entry, that particular entry is consumed.