Fortinet white logo
Fortinet white logo

CLI Reference

diagnose switch-controller

diagnose switch-controller

Fortiswitch controller.

This topic includes the following commands:

diagnose switch-controller flow-collector

Flow collector.

diagnose switch-controller flow-collector

diagnose switch-controller flow-collector status

Display flow collector status.

diagnose switch-controller flow-collector status

diagnose switch-controller mac-cache

Mac cache.

diagnose switch-controller mac-cache

diagnose switch-controller mac-cache filter

Filter to dump devices connected to managed FortiSwitch.

diagnose switch-controller mac-cache filter

diagnose switch-controller mac-cache filter clear

Clear the configured device filter.

diagnose switch-controller mac-cache filter clear

diagnose switch-controller mac-cache filter intf-name

Device filter interface name.

diagnose switch-controller mac-cache filter intf-name

diagnose switch-controller mac-cache filter mac

Device filter MAC Address.

diagnose switch-controller mac-cache filter mac

diagnose switch-controller mac-cache filter vlan-id

Device filter VLAN ID.

diagnose switch-controller mac-cache filter vlan-id

diagnose switch-controller mac-cache show

Show running clients.

diagnose switch-controller mac-cache show <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller mac-device

MAC devices.

diagnose switch-controller mac-device

diagnose switch-controller mac-device cache

Event cached MAC address.

diagnose switch-controller mac-device cache

diagnose switch-controller mac-device dynamic

Display detected DPP devices which matches dynamic port policy.

diagnose switch-controller mac-device dynamic

diagnose switch-controller mac-device nac

Display NAC devices.

diagnose switch-controller mac-device nac

diagnose switch-controller mac-device nac known

Display detected NAC devices which matches NAC policy.

diagnose switch-controller mac-device nac known

diagnose switch-controller mac-device nac onboarding

Display onboarding NAC devices with no matching NAC policy.

diagnose switch-controller mac-device nac onboarding

diagnose switch-controller nac-tag

Add, remove, or show MAC from NAC dynamic firewall tag.

diagnose switch-controller nac-tag

diagnose switch-controller nac-tag add

Add MAC to dynamic NAC tag.

diagnose switch-controller nac-tag add <tag> <mac>

Parameter

Description

Type

Size

<tag>

Firewall tag.

string

<mac>

MAC address

string

diagnose switch-controller nac-tag delete

Delete MAC from dynamic NAC tag.

diagnose switch-controller nac-tag delete <tag> <mac>

Parameter

Description

Type

Size

<tag>

Firewall tag.

string

<mac>

MAC address

string

diagnose switch-controller nac-tag get

Show all MACs associated with dynamic NAC tag.

diagnose switch-controller nac-tag get <tag>

Parameter

Description

Type

Size

<tag>

Firewall tag.

string

diagnose switch-controller restart-daemon

Restart switch controller daemons.

diagnose switch-controller restart-daemon

diagnose switch-controller restart-daemon acd

Restart switch-controller daemon.

diagnose switch-controller restart-daemon acd

diagnose switch-controller restart-daemon swtpd

Restart switch-controller daemon in FortiSwitch device.

diagnose switch-controller restart-daemon swtpd <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info

Switch information.

diagnose switch-controller switch-info

diagnose switch-controller switch-info 802.1X

Managed FortiSwitch port 802.1X status.

diagnose switch-controller switch-info 802.1X <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for 802.1X status.

string

diagnose switch-controller switch-info 802.1X-dacl

Managed FortiSwitch port 802.1X dynamic ACL status.

diagnose switch-controller switch-info 802.1X-dacl <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for 802.1X dacl status.

string

diagnose switch-controller switch-info acl-counters

Managed FortiSwitch port ACL counters.

diagnose switch-controller switch-info acl-counters <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info arp-inspection

Managed FortiSwitch ARP inspection interface list.

diagnose switch-controller switch-info arp-inspection

diagnose switch-controller switch-info arp-inspection stats

Show ARP inspection statistics.

diagnose switch-controller switch-info arp-inspection stats <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info arp-inspection stats-clear

Clear ARP inspection statistics.

diagnose switch-controller switch-info arp-inspection stats-clear <vlan-id> <switch>

Parameter

Description

Type

Size

<vlan-id>

Managed FortiSwitch VLAN of interest for MAC address list.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info bpdu-guard-status

Managed FortiSwitch STP BPDU guard status.

diagnose switch-controller switch-info bpdu-guard-status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info dhcp-snooping

Managed FortiSwitch DHCP snooping interface list.

diagnose switch-controller switch-info dhcp-snooping

diagnose switch-controller switch-info dhcp-snooping database

DHCP snooping database details.

diagnose switch-controller switch-info dhcp-snooping database <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info dhcp-snooping status

DHCP snooping status.

diagnose switch-controller switch-info dhcp-snooping status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info fan

List fan status.

diagnose switch-controller switch-info fan <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info flapguard

Managed FortiSwitch flap guard.

diagnose switch-controller switch-info flapguard

diagnose switch-controller switch-info flapguard status

List flapguard status.

diagnose switch-controller switch-info flapguard status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info flow-tracking

Managed FortiSwitch flow information.

diagnose switch-controller switch-info flow-tracking

diagnose switch-controller switch-info flow-tracking flows

Flow record data.

diagnose switch-controller switch-info flow-tracking flows <count> <ip/subnet> <switch> <port>

Parameter

Description

Type

Size

<count>

Specify record count or all for query response.

string

<ip/subnet>

Specify IP address/Subnet(Class IP/Netmask) or all.

string

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port.

string

diagnose switch-controller switch-info flow-tracking flows-raw

Flow raw record data.

diagnose switch-controller switch-info flow-tracking flows-raw <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info flow-tracking statistics

Flow statistics data.

diagnose switch-controller switch-info flow-tracking statistics <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info igmp-snooping

IGMP snooping information.

diagnose switch-controller switch-info igmp-snooping

diagnose switch-controller switch-info igmp-snooping group

Managed FortiSwitch IGMP snooping learned groups list.

diagnose switch-controller switch-info igmp-snooping group <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info igmp-snooping status

Managed FortiSwitch IGMP snooping status.

diagnose switch-controller switch-info igmp-snooping status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info ip-source-guard

Managed FortiSwitch source guard information in hardware.

diagnose switch-controller switch-info ip-source-guard

diagnose switch-controller switch-info ip-source-guard hardware

Managed FortiSwitch IP source guard information in hardware.

diagnose switch-controller switch-info ip-source-guard hardware <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info lldp

LLDP-related information.

diagnose switch-controller switch-info lldp

diagnose switch-controller switch-info lldp neighbors-detail

LLDP neighbor detail.

diagnose switch-controller switch-info lldp neighbors-detail <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info lldp neighbors-summary

LLDP neighbor summary.

diagnose switch-controller switch-info lldp neighbors-summary <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info lldp stats

LLDP port statistics.

diagnose switch-controller switch-info lldp stats <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info loop-guard

Managed FortiSwitch loop-guard status.

diagnose switch-controller switch-info loop-guard <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info mac-limit-violations

Managed FortiSwitch violated MACs.

diagnose switch-controller switch-info mac-limit-violations

diagnose switch-controller switch-info mac-limit-violations all

FortiSwitch all violations.

diagnose switch-controller switch-info mac-limit-violations all <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info mac-limit-violations interface

FortiSwitch port specific violations.

diagnose switch-controller switch-info mac-limit-violations interface <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port.

string

diagnose switch-controller switch-info mac-limit-violations vlan

FortiSwitch VLAN specific violations.

diagnose switch-controller switch-info mac-limit-violations vlan <switch> <vlan-id>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<vlan-id>

Managed FortiSwitch VLAN ID.

string

diagnose switch-controller switch-info mac-table

Managed FortiSwitch MAC address list.

diagnose switch-controller switch-info mac-table <switch> <vlan-id>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<vlan-id>

Managed FortiSwitch VLAN of interest for MAC address list.

string

diagnose switch-controller switch-info mclag

Dumps MCLAG related information from FortiSwitch.

diagnose switch-controller switch-info mclag

diagnose switch-controller switch-info mclag icl

Dumps MCLAG inter-chassis-link(ICL).

diagnose switch-controller switch-info mclag icl <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info mclag list

Dumps MCLAG list.

diagnose switch-controller switch-info mclag list <switch> <mclag-trunk-name>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<mclag-trunk-name>

MCLAG's trunk name.

string

diagnose switch-controller switch-info mclag peer-consistency-check

Checks MCLAG peer consistency.

diagnose switch-controller switch-info mclag peer-consistency-check <switch> <mclag-trunk-name>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<mclag-trunk-name>

MCLAG's trunk name.

string

diagnose switch-controller switch-info mirror

Managed FortiSwitch mirror information.

diagnose switch-controller switch-info mirror

diagnose switch-controller switch-info mirror status

Mirror session status.

diagnose switch-controller switch-info mirror status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info modules

Dumps modules related information from FortiSwitch.

diagnose switch-controller switch-info modules

diagnose switch-controller switch-info modules detail

Managed FortiSwitch module details.

diagnose switch-controller switch-info modules detail <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info modules limits

Managed FortiSwitch module limits.

diagnose switch-controller switch-info modules limits <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info modules status

Managed FortiSwitch module status.

diagnose switch-controller switch-info modules status <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info modules summary

Managed FortiSwitch module summary.

diagnose switch-controller switch-info modules summary <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info option82-mapping

Managed FortiSwitch DHCP option 82 mapping.

diagnose switch-controller switch-info option82-mapping

diagnose switch-controller switch-info option82-mapping snooping

Show DHCP option 82 mapping for snooping configuration.

diagnose switch-controller switch-info option82-mapping snooping

diagnose switch-controller switch-info option82-mapping snooping ascii

Display DHCP option 82 string in ascii format.

diagnose switch-controller switch-info option82-mapping snooping ascii <switch> <vlan> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<vlan>

Managed FortiSwitch VLAN.

string

<port>

Managed FortiSwitch interface.

string

diagnose switch-controller switch-info option82-mapping snooping hex

Display DHCP option 82 string in hex format.

diagnose switch-controller switch-info option82-mapping snooping hex <switch> <vlan> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<vlan>

Managed FortiSwitch VLAN.

string

<port>

Managed FortiSwitch interface.

string

diagnose switch-controller switch-info pdu-counters-list

Managed FortiSwitch pdu-counters.

diagnose switch-controller switch-info pdu-counters-list <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info poe

PoE-related information.

diagnose switch-controller switch-info poe

diagnose switch-controller switch-info poe detail

PoE detail.

diagnose switch-controller switch-info poe detail <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info poe summary

PoE summary.

diagnose switch-controller switch-info poe summary <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info port-properties

Managed FortiSwitch port properties.

diagnose switch-controller switch-info port-properties <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info port-stats

Managed FortiSwitch port statistics.

diagnose switch-controller switch-info port-stats <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info qos-stats

Managed FortiSwitch QoS statistics.

diagnose switch-controller switch-info qos-stats <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info rpvst

Managed FortiSwitch STP port information are inter-operating with rapid PVST network.

diagnose switch-controller switch-info rpvst <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info status

System status.

diagnose switch-controller switch-info status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info stp

Managed FortiSwitch STP instance status.

diagnose switch-controller switch-info stp <switch> <instance-id>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<instance-id>

Managed FortiSwitch STP instance of interest for statistics.

string

diagnose switch-controller switch-info trunk

Trunk information.

diagnose switch-controller switch-info trunk

diagnose switch-controller switch-info trunk config

Managed FortiSwitch trunk config information.

diagnose switch-controller switch-info trunk config <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info trunk status

Managed FortiSwitch trunk status.

diagnose switch-controller switch-info trunk status <switch> <trunk-port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<trunk-port>

Managed FortiSwitch trunk-port of interest for state.

string

diagnose switch-controller switch-recommendation

Recommendations for FortiLink topology and configuration.

diagnose switch-controller switch-recommendation

diagnose switch-controller switch-recommendation bios-compatibility-check

FortiSwitch BIOS compatibility check.

diagnose switch-controller switch-recommendation bios-compatibility-check <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation check-fortilink-link-redundancy

Check if FortiLink trunk has redundant links.

diagnose switch-controller switch-recommendation check-fortilink-link-redundancy <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation check-isl-icl-link-redundancy

Check if ISL/ICL trunk has redundant links.

diagnose switch-controller switch-recommendation check-isl-icl-link-redundancy <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch #1 device ID.

string

diagnose switch-controller switch-recommendation check-isl-link-redundancy

Check if ISL trunk has redundant links.

diagnose switch-controller switch-recommendation check-isl-link-redundancy <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch #1 device ID.

string

diagnose switch-controller switch-recommendation clear-dhcp-opt43-key

Clear DHCP option43 key in topology.

diagnose switch-controller switch-recommendation clear-dhcp-opt43-key <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation config-dhcp-opt43-key

Config DHCP option43 key in topology.

diagnose switch-controller switch-recommendation config-dhcp-opt43-key <fortilink interface> <option 43 key>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<option 43 key>

DHCP option 43 key.

string

diagnose switch-controller switch-recommendation disable-auto-config-poe-status

Disable PoE status of auto-config default policy.

diagnose switch-controller switch-recommendation disable-auto-config-poe-status

diagnose switch-controller switch-recommendation disable-bounce-quarantine-link

Disable bounce quarantine link.

diagnose switch-controller switch-recommendation disable-bounce-quarantine-link

diagnose switch-controller switch-recommendation disable-poe-pre-standard-detection

Disable PoE pre-standard detection for all user ports.

diagnose switch-controller switch-recommendation disable-poe-pre-standard-detection <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation disable-stp-state-topology

Disable STP state for all user ports.

diagnose switch-controller switch-recommendation disable-stp-state-topology <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation enable-auto-config-poe-status

Enable PoE status of auto-config default policy.

diagnose switch-controller switch-recommendation enable-auto-config-poe-status

diagnose switch-controller switch-recommendation enable-bounce-quarantine-link

Enable bounce quarantine link.

diagnose switch-controller switch-recommendation enable-bounce-quarantine-link

diagnose switch-controller switch-recommendation enable-poe-pre-standard-detection

Enable PoE pre-standard detection for all user ports.

diagnose switch-controller switch-recommendation enable-poe-pre-standard-detection <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation enable-stp-state-topology

Enable STP state for all user ports.

diagnose switch-controller switch-recommendation enable-stp-state-topology <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation fabric-lockdown-check

Get fabric lockdown status.

diagnose switch-controller switch-recommendation fabric-lockdown-check <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation fabric-lockdown-disable

Disable fabric lockdown.

diagnose switch-controller switch-recommendation fabric-lockdown-disable <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation fabric-lockdown-enable

Enable fabric lockdown.

diagnose switch-controller switch-recommendation fabric-lockdown-enable <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation get-mclag-tier1-candidate

Get MCLAG tier1 candidate recommendation.

diagnose switch-controller switch-recommendation get-mclag-tier1-candidate <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation get-mclag-tier2-candidate

Get MCLAG tier2 candidate recommendation.

diagnose switch-controller switch-recommendation get-mclag-tier2-candidate <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

FortiSwitch device ID for tier-1 MCLAG peer 1.

string

diagnose switch-controller switch-recommendation get-mclag-tier3-candidate

Get MCLAG tier3 candidate recommendation.

diagnose switch-controller switch-recommendation get-mclag-tier3-candidate <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

FortiSwitch device ID for tier-2 MCLAG peer 1.

string

diagnose switch-controller switch-recommendation is-fortilink-capacity-exceeded

Check if FortiLink is almost at capacity.

diagnose switch-controller switch-recommendation is-fortilink-capacity-exceeded

diagnose switch-controller switch-recommendation is-switch-dual-homed

Check if switch is dual-homed.

diagnose switch-controller switch-recommendation is-switch-dual-homed <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation lock-down-topo-lldp-profile

Lock down topology via LLDP profile.

diagnose switch-controller switch-recommendation lock-down-topo-lldp-profile <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation pse-check

Get fabric PSE-PSE status.

diagnose switch-controller switch-recommendation pse-check <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation pse-config

Disable fabric POE-status to prevent PSE-PSE scenarios.

diagnose switch-controller switch-recommendation pse-config <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation set-tier-plus-mclag-icl

Configure tier-plus MCLAG-ICL.

diagnose switch-controller switch-recommendation set-tier-plus-mclag-icl <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

FortiSwitch device ID for parent MCLAG peer 1.

string

diagnose switch-controller switch-recommendation set-tier1-mclag-icl

Configure tier-1 MCLAG-ICL.

diagnose switch-controller switch-recommendation set-tier1-mclag-icl <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

FortiSwitch device ID for MCLAG peer 1.

string

diagnose switch-controller switch-recommendation tunnel-mode-settings

Tunnel mode settings.

diagnose switch-controller switch-recommendation tunnel-mode-settings <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation unlock-topo-lldp-profile

Unlock topology via LLDP profile.

diagnose switch-controller switch-recommendation unlock-topo-lldp-profile <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller system-info

Switch-controller system information.

diagnose switch-controller system-info

diagnose switch-controller system-info show

Show switch-controller system info.

diagnose switch-controller system-info show

diagnose switch-controller telemetry

FortiSwitch telemetry.

diagnose switch-controller telemetry

diagnose switch-controller telemetry show

Show FortiSwitch telemetry.

diagnose switch-controller telemetry show

diagnose switch-controller telemetry show mac-stats

Show FortiSwitch MAC telemetry.

diagnose switch-controller telemetry show mac-stats

diagnose switch-controller telemetry show mac-stats switch

Show FortiSwitch telemetry.

diagnose switch-controller telemetry show mac-stats switch

diagnose switch-controller telemetry show switch

Show FortiSwitch telemetry.

diagnose switch-controller telemetry show switch

diagnose switch-controller telemetry show switch-port

Show FortiSwitch port telemetry.

diagnose switch-controller telemetry show switch-port <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for telemetry.

string

diagnose switch-controller topology

Topology commands.

diagnose switch-controller topology

diagnose switch-controller topology reset

Topology reset commands.

diagnose switch-controller topology reset

diagnose switch-controller topology reset fortilink-flag

Reset FortiLink flag.

diagnose switch-controller topology reset fortilink-flag <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller topology reset isl-peer-flag

Reset isl peer flag.

diagnose switch-controller topology reset isl-peer-flag <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller topology set

Topology set commands.

diagnose switch-controller topology set

diagnose switch-controller topology set fortilink-flag

Set FortiLink flag.

diagnose switch-controller topology set fortilink-flag <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller topology set isl-peer-flag

Set isl peer flag.

diagnose switch-controller topology set isl-peer-flag <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller traffic-capture

Traffic capture.

diagnose switch-controller traffic-capture

diagnose switch-controller traffic-capture show

Dump all sniffer sessions.

diagnose switch-controller traffic-capture show

diagnose switch-controller traffic-capture start

Start sniffer session.

diagnose switch-controller traffic-capture start <fortilink-interface> <mac>

Parameter

Description

Type

Size

<fortilink-interface>

FortiLink interface name.

string

<mac>

Device MAC Address.

string

diagnose switch-controller traffic-capture stop

Stop sniffer session and callback.

diagnose switch-controller traffic-capture stop <fortilink-interface> <mac>

Parameter

Description

Type

Size

<fortilink-interface>

FortiLink interface name.

string

<mac>

Device MAC Address.

string

diagnose switch-controller trigger

Trigger switch controller processing.

diagnose switch-controller trigger

diagnose switch-controller trigger config-sync

Triggers full configuration synchronization for FortiSwitch.

diagnose switch-controller trigger config-sync <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller trigger mac-sync

Trigger MAC sync for all managed FortiSwitches.

diagnose switch-controller trigger mac-sync

diagnose switch-controller trigger nac-mac-cache-sync

Triggers NAC MAC cache synchronization from FortiSwitch.

diagnose switch-controller trigger nac-mac-cache-sync <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller trigger reset-hardware-counters

Triggers reset of port statistic counters for FortiSwitch.

diagnose switch-controller trigger reset-hardware-counters <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port list (range of ports separated by commas; eg 1,3,1-4,port6-7,port10-port11,internal).

string

diagnose switch-controller trigger restore-hardware-counters

Triggers restoration of port statistic counters from FortiSwitch hardware.

diagnose switch-controller trigger restore-hardware-counters <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port list (range of ports separated by commas; eg 1,3,1-4,port6-7,port10-port11,internal).

string

diagnose switch-controller tunnel-status

Switch-controller tunnel status.

diagnose switch-controller tunnel-status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller

diagnose switch-controller

Fortiswitch controller.

This topic includes the following commands:

diagnose switch-controller flow-collector

Flow collector.

diagnose switch-controller flow-collector

diagnose switch-controller flow-collector status

Display flow collector status.

diagnose switch-controller flow-collector status

diagnose switch-controller mac-cache

Mac cache.

diagnose switch-controller mac-cache

diagnose switch-controller mac-cache filter

Filter to dump devices connected to managed FortiSwitch.

diagnose switch-controller mac-cache filter

diagnose switch-controller mac-cache filter clear

Clear the configured device filter.

diagnose switch-controller mac-cache filter clear

diagnose switch-controller mac-cache filter intf-name

Device filter interface name.

diagnose switch-controller mac-cache filter intf-name

diagnose switch-controller mac-cache filter mac

Device filter MAC Address.

diagnose switch-controller mac-cache filter mac

diagnose switch-controller mac-cache filter vlan-id

Device filter VLAN ID.

diagnose switch-controller mac-cache filter vlan-id

diagnose switch-controller mac-cache show

Show running clients.

diagnose switch-controller mac-cache show <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller mac-device

MAC devices.

diagnose switch-controller mac-device

diagnose switch-controller mac-device cache

Event cached MAC address.

diagnose switch-controller mac-device cache

diagnose switch-controller mac-device dynamic

Display detected DPP devices which matches dynamic port policy.

diagnose switch-controller mac-device dynamic

diagnose switch-controller mac-device nac

Display NAC devices.

diagnose switch-controller mac-device nac

diagnose switch-controller mac-device nac known

Display detected NAC devices which matches NAC policy.

diagnose switch-controller mac-device nac known

diagnose switch-controller mac-device nac onboarding

Display onboarding NAC devices with no matching NAC policy.

diagnose switch-controller mac-device nac onboarding

diagnose switch-controller nac-tag

Add, remove, or show MAC from NAC dynamic firewall tag.

diagnose switch-controller nac-tag

diagnose switch-controller nac-tag add

Add MAC to dynamic NAC tag.

diagnose switch-controller nac-tag add <tag> <mac>

Parameter

Description

Type

Size

<tag>

Firewall tag.

string

<mac>

MAC address

string

diagnose switch-controller nac-tag delete

Delete MAC from dynamic NAC tag.

diagnose switch-controller nac-tag delete <tag> <mac>

Parameter

Description

Type

Size

<tag>

Firewall tag.

string

<mac>

MAC address

string

diagnose switch-controller nac-tag get

Show all MACs associated with dynamic NAC tag.

diagnose switch-controller nac-tag get <tag>

Parameter

Description

Type

Size

<tag>

Firewall tag.

string

diagnose switch-controller restart-daemon

Restart switch controller daemons.

diagnose switch-controller restart-daemon

diagnose switch-controller restart-daemon acd

Restart switch-controller daemon.

diagnose switch-controller restart-daemon acd

diagnose switch-controller restart-daemon swtpd

Restart switch-controller daemon in FortiSwitch device.

diagnose switch-controller restart-daemon swtpd <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info

Switch information.

diagnose switch-controller switch-info

diagnose switch-controller switch-info 802.1X

Managed FortiSwitch port 802.1X status.

diagnose switch-controller switch-info 802.1X <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for 802.1X status.

string

diagnose switch-controller switch-info 802.1X-dacl

Managed FortiSwitch port 802.1X dynamic ACL status.

diagnose switch-controller switch-info 802.1X-dacl <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for 802.1X dacl status.

string

diagnose switch-controller switch-info acl-counters

Managed FortiSwitch port ACL counters.

diagnose switch-controller switch-info acl-counters <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info arp-inspection

Managed FortiSwitch ARP inspection interface list.

diagnose switch-controller switch-info arp-inspection

diagnose switch-controller switch-info arp-inspection stats

Show ARP inspection statistics.

diagnose switch-controller switch-info arp-inspection stats <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info arp-inspection stats-clear

Clear ARP inspection statistics.

diagnose switch-controller switch-info arp-inspection stats-clear <vlan-id> <switch>

Parameter

Description

Type

Size

<vlan-id>

Managed FortiSwitch VLAN of interest for MAC address list.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info bpdu-guard-status

Managed FortiSwitch STP BPDU guard status.

diagnose switch-controller switch-info bpdu-guard-status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info dhcp-snooping

Managed FortiSwitch DHCP snooping interface list.

diagnose switch-controller switch-info dhcp-snooping

diagnose switch-controller switch-info dhcp-snooping database

DHCP snooping database details.

diagnose switch-controller switch-info dhcp-snooping database <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info dhcp-snooping status

DHCP snooping status.

diagnose switch-controller switch-info dhcp-snooping status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info fan

List fan status.

diagnose switch-controller switch-info fan <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info flapguard

Managed FortiSwitch flap guard.

diagnose switch-controller switch-info flapguard

diagnose switch-controller switch-info flapguard status

List flapguard status.

diagnose switch-controller switch-info flapguard status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info flow-tracking

Managed FortiSwitch flow information.

diagnose switch-controller switch-info flow-tracking

diagnose switch-controller switch-info flow-tracking flows

Flow record data.

diagnose switch-controller switch-info flow-tracking flows <count> <ip/subnet> <switch> <port>

Parameter

Description

Type

Size

<count>

Specify record count or all for query response.

string

<ip/subnet>

Specify IP address/Subnet(Class IP/Netmask) or all.

string

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port.

string

diagnose switch-controller switch-info flow-tracking flows-raw

Flow raw record data.

diagnose switch-controller switch-info flow-tracking flows-raw <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info flow-tracking statistics

Flow statistics data.

diagnose switch-controller switch-info flow-tracking statistics <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info igmp-snooping

IGMP snooping information.

diagnose switch-controller switch-info igmp-snooping

diagnose switch-controller switch-info igmp-snooping group

Managed FortiSwitch IGMP snooping learned groups list.

diagnose switch-controller switch-info igmp-snooping group <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info igmp-snooping status

Managed FortiSwitch IGMP snooping status.

diagnose switch-controller switch-info igmp-snooping status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info ip-source-guard

Managed FortiSwitch source guard information in hardware.

diagnose switch-controller switch-info ip-source-guard

diagnose switch-controller switch-info ip-source-guard hardware

Managed FortiSwitch IP source guard information in hardware.

diagnose switch-controller switch-info ip-source-guard hardware <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info lldp

LLDP-related information.

diagnose switch-controller switch-info lldp

diagnose switch-controller switch-info lldp neighbors-detail

LLDP neighbor detail.

diagnose switch-controller switch-info lldp neighbors-detail <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info lldp neighbors-summary

LLDP neighbor summary.

diagnose switch-controller switch-info lldp neighbors-summary <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info lldp stats

LLDP port statistics.

diagnose switch-controller switch-info lldp stats <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info loop-guard

Managed FortiSwitch loop-guard status.

diagnose switch-controller switch-info loop-guard <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info mac-limit-violations

Managed FortiSwitch violated MACs.

diagnose switch-controller switch-info mac-limit-violations

diagnose switch-controller switch-info mac-limit-violations all

FortiSwitch all violations.

diagnose switch-controller switch-info mac-limit-violations all <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info mac-limit-violations interface

FortiSwitch port specific violations.

diagnose switch-controller switch-info mac-limit-violations interface <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port.

string

diagnose switch-controller switch-info mac-limit-violations vlan

FortiSwitch VLAN specific violations.

diagnose switch-controller switch-info mac-limit-violations vlan <switch> <vlan-id>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<vlan-id>

Managed FortiSwitch VLAN ID.

string

diagnose switch-controller switch-info mac-table

Managed FortiSwitch MAC address list.

diagnose switch-controller switch-info mac-table <switch> <vlan-id>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<vlan-id>

Managed FortiSwitch VLAN of interest for MAC address list.

string

diagnose switch-controller switch-info mclag

Dumps MCLAG related information from FortiSwitch.

diagnose switch-controller switch-info mclag

diagnose switch-controller switch-info mclag icl

Dumps MCLAG inter-chassis-link(ICL).

diagnose switch-controller switch-info mclag icl <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info mclag list

Dumps MCLAG list.

diagnose switch-controller switch-info mclag list <switch> <mclag-trunk-name>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<mclag-trunk-name>

MCLAG's trunk name.

string

diagnose switch-controller switch-info mclag peer-consistency-check

Checks MCLAG peer consistency.

diagnose switch-controller switch-info mclag peer-consistency-check <switch> <mclag-trunk-name>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<mclag-trunk-name>

MCLAG's trunk name.

string

diagnose switch-controller switch-info mirror

Managed FortiSwitch mirror information.

diagnose switch-controller switch-info mirror

diagnose switch-controller switch-info mirror status

Mirror session status.

diagnose switch-controller switch-info mirror status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info modules

Dumps modules related information from FortiSwitch.

diagnose switch-controller switch-info modules

diagnose switch-controller switch-info modules detail

Managed FortiSwitch module details.

diagnose switch-controller switch-info modules detail <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info modules limits

Managed FortiSwitch module limits.

diagnose switch-controller switch-info modules limits <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info modules status

Managed FortiSwitch module status.

diagnose switch-controller switch-info modules status <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info modules summary

Managed FortiSwitch module summary.

diagnose switch-controller switch-info modules summary <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info option82-mapping

Managed FortiSwitch DHCP option 82 mapping.

diagnose switch-controller switch-info option82-mapping

diagnose switch-controller switch-info option82-mapping snooping

Show DHCP option 82 mapping for snooping configuration.

diagnose switch-controller switch-info option82-mapping snooping

diagnose switch-controller switch-info option82-mapping snooping ascii

Display DHCP option 82 string in ascii format.

diagnose switch-controller switch-info option82-mapping snooping ascii <switch> <vlan> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<vlan>

Managed FortiSwitch VLAN.

string

<port>

Managed FortiSwitch interface.

string

diagnose switch-controller switch-info option82-mapping snooping hex

Display DHCP option 82 string in hex format.

diagnose switch-controller switch-info option82-mapping snooping hex <switch> <vlan> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<vlan>

Managed FortiSwitch VLAN.

string

<port>

Managed FortiSwitch interface.

string

diagnose switch-controller switch-info pdu-counters-list

Managed FortiSwitch pdu-counters.

diagnose switch-controller switch-info pdu-counters-list <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info poe

PoE-related information.

diagnose switch-controller switch-info poe

diagnose switch-controller switch-info poe detail

PoE detail.

diagnose switch-controller switch-info poe detail <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info poe summary

PoE summary.

diagnose switch-controller switch-info poe summary <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info port-properties

Managed FortiSwitch port properties.

diagnose switch-controller switch-info port-properties <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info port-stats

Managed FortiSwitch port statistics.

diagnose switch-controller switch-info port-stats <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info qos-stats

Managed FortiSwitch QoS statistics.

diagnose switch-controller switch-info qos-stats <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for statistics.

string

diagnose switch-controller switch-info rpvst

Managed FortiSwitch STP port information are inter-operating with rapid PVST network.

diagnose switch-controller switch-info rpvst <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller switch-info status

System status.

diagnose switch-controller switch-info status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info stp

Managed FortiSwitch STP instance status.

diagnose switch-controller switch-info stp <switch> <instance-id>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<instance-id>

Managed FortiSwitch STP instance of interest for statistics.

string

diagnose switch-controller switch-info trunk

Trunk information.

diagnose switch-controller switch-info trunk

diagnose switch-controller switch-info trunk config

Managed FortiSwitch trunk config information.

diagnose switch-controller switch-info trunk config <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-info trunk status

Managed FortiSwitch trunk status.

diagnose switch-controller switch-info trunk status <switch> <trunk-port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<trunk-port>

Managed FortiSwitch trunk-port of interest for state.

string

diagnose switch-controller switch-recommendation

Recommendations for FortiLink topology and configuration.

diagnose switch-controller switch-recommendation

diagnose switch-controller switch-recommendation bios-compatibility-check

FortiSwitch BIOS compatibility check.

diagnose switch-controller switch-recommendation bios-compatibility-check <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation check-fortilink-link-redundancy

Check if FortiLink trunk has redundant links.

diagnose switch-controller switch-recommendation check-fortilink-link-redundancy <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation check-isl-icl-link-redundancy

Check if ISL/ICL trunk has redundant links.

diagnose switch-controller switch-recommendation check-isl-icl-link-redundancy <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch #1 device ID.

string

diagnose switch-controller switch-recommendation check-isl-link-redundancy

Check if ISL trunk has redundant links.

diagnose switch-controller switch-recommendation check-isl-link-redundancy <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch #1 device ID.

string

diagnose switch-controller switch-recommendation clear-dhcp-opt43-key

Clear DHCP option43 key in topology.

diagnose switch-controller switch-recommendation clear-dhcp-opt43-key <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation config-dhcp-opt43-key

Config DHCP option43 key in topology.

diagnose switch-controller switch-recommendation config-dhcp-opt43-key <fortilink interface> <option 43 key>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<option 43 key>

DHCP option 43 key.

string

diagnose switch-controller switch-recommendation disable-auto-config-poe-status

Disable PoE status of auto-config default policy.

diagnose switch-controller switch-recommendation disable-auto-config-poe-status

diagnose switch-controller switch-recommendation disable-bounce-quarantine-link

Disable bounce quarantine link.

diagnose switch-controller switch-recommendation disable-bounce-quarantine-link

diagnose switch-controller switch-recommendation disable-poe-pre-standard-detection

Disable PoE pre-standard detection for all user ports.

diagnose switch-controller switch-recommendation disable-poe-pre-standard-detection <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation disable-stp-state-topology

Disable STP state for all user ports.

diagnose switch-controller switch-recommendation disable-stp-state-topology <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation enable-auto-config-poe-status

Enable PoE status of auto-config default policy.

diagnose switch-controller switch-recommendation enable-auto-config-poe-status

diagnose switch-controller switch-recommendation enable-bounce-quarantine-link

Enable bounce quarantine link.

diagnose switch-controller switch-recommendation enable-bounce-quarantine-link

diagnose switch-controller switch-recommendation enable-poe-pre-standard-detection

Enable PoE pre-standard detection for all user ports.

diagnose switch-controller switch-recommendation enable-poe-pre-standard-detection <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation enable-stp-state-topology

Enable STP state for all user ports.

diagnose switch-controller switch-recommendation enable-stp-state-topology <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation fabric-lockdown-check

Get fabric lockdown status.

diagnose switch-controller switch-recommendation fabric-lockdown-check <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation fabric-lockdown-disable

Disable fabric lockdown.

diagnose switch-controller switch-recommendation fabric-lockdown-disable <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation fabric-lockdown-enable

Enable fabric lockdown.

diagnose switch-controller switch-recommendation fabric-lockdown-enable <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation get-mclag-tier1-candidate

Get MCLAG tier1 candidate recommendation.

diagnose switch-controller switch-recommendation get-mclag-tier1-candidate <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation get-mclag-tier2-candidate

Get MCLAG tier2 candidate recommendation.

diagnose switch-controller switch-recommendation get-mclag-tier2-candidate <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

FortiSwitch device ID for tier-1 MCLAG peer 1.

string

diagnose switch-controller switch-recommendation get-mclag-tier3-candidate

Get MCLAG tier3 candidate recommendation.

diagnose switch-controller switch-recommendation get-mclag-tier3-candidate <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

FortiSwitch device ID for tier-2 MCLAG peer 1.

string

diagnose switch-controller switch-recommendation is-fortilink-capacity-exceeded

Check if FortiLink is almost at capacity.

diagnose switch-controller switch-recommendation is-fortilink-capacity-exceeded

diagnose switch-controller switch-recommendation is-switch-dual-homed

Check if switch is dual-homed.

diagnose switch-controller switch-recommendation is-switch-dual-homed <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation lock-down-topo-lldp-profile

Lock down topology via LLDP profile.

diagnose switch-controller switch-recommendation lock-down-topo-lldp-profile <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller switch-recommendation pse-check

Get fabric PSE-PSE status.

diagnose switch-controller switch-recommendation pse-check <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation pse-config

Disable fabric POE-status to prevent PSE-PSE scenarios.

diagnose switch-controller switch-recommendation pse-config <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation set-tier-plus-mclag-icl

Configure tier-plus MCLAG-ICL.

diagnose switch-controller switch-recommendation set-tier-plus-mclag-icl <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

FortiSwitch device ID for parent MCLAG peer 1.

string

diagnose switch-controller switch-recommendation set-tier1-mclag-icl

Configure tier-1 MCLAG-ICL.

diagnose switch-controller switch-recommendation set-tier1-mclag-icl <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

FortiSwitch device ID for MCLAG peer 1.

string

diagnose switch-controller switch-recommendation tunnel-mode-settings

Tunnel mode settings.

diagnose switch-controller switch-recommendation tunnel-mode-settings <fortilink interface>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

diagnose switch-controller switch-recommendation unlock-topo-lldp-profile

Unlock topology via LLDP profile.

diagnose switch-controller switch-recommendation unlock-topo-lldp-profile <fortilink interface> <switch>

Parameter

Description

Type

Size

<fortilink interface>

FortiLink interface name.

string

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller system-info

Switch-controller system information.

diagnose switch-controller system-info

diagnose switch-controller system-info show

Show switch-controller system info.

diagnose switch-controller system-info show

diagnose switch-controller telemetry

FortiSwitch telemetry.

diagnose switch-controller telemetry

diagnose switch-controller telemetry show

Show FortiSwitch telemetry.

diagnose switch-controller telemetry show

diagnose switch-controller telemetry show mac-stats

Show FortiSwitch MAC telemetry.

diagnose switch-controller telemetry show mac-stats

diagnose switch-controller telemetry show mac-stats switch

Show FortiSwitch telemetry.

diagnose switch-controller telemetry show mac-stats switch

diagnose switch-controller telemetry show switch

Show FortiSwitch telemetry.

diagnose switch-controller telemetry show switch

diagnose switch-controller telemetry show switch-port

Show FortiSwitch port telemetry.

diagnose switch-controller telemetry show switch-port <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port of interest for telemetry.

string

diagnose switch-controller topology

Topology commands.

diagnose switch-controller topology

diagnose switch-controller topology reset

Topology reset commands.

diagnose switch-controller topology reset

diagnose switch-controller topology reset fortilink-flag

Reset FortiLink flag.

diagnose switch-controller topology reset fortilink-flag <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller topology reset isl-peer-flag

Reset isl peer flag.

diagnose switch-controller topology reset isl-peer-flag <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller topology set

Topology set commands.

diagnose switch-controller topology set

diagnose switch-controller topology set fortilink-flag

Set FortiLink flag.

diagnose switch-controller topology set fortilink-flag <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller topology set isl-peer-flag

Set isl peer flag.

diagnose switch-controller topology set isl-peer-flag <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port name.

string

diagnose switch-controller traffic-capture

Traffic capture.

diagnose switch-controller traffic-capture

diagnose switch-controller traffic-capture show

Dump all sniffer sessions.

diagnose switch-controller traffic-capture show

diagnose switch-controller traffic-capture start

Start sniffer session.

diagnose switch-controller traffic-capture start <fortilink-interface> <mac>

Parameter

Description

Type

Size

<fortilink-interface>

FortiLink interface name.

string

<mac>

Device MAC Address.

string

diagnose switch-controller traffic-capture stop

Stop sniffer session and callback.

diagnose switch-controller traffic-capture stop <fortilink-interface> <mac>

Parameter

Description

Type

Size

<fortilink-interface>

FortiLink interface name.

string

<mac>

Device MAC Address.

string

diagnose switch-controller trigger

Trigger switch controller processing.

diagnose switch-controller trigger

diagnose switch-controller trigger config-sync

Triggers full configuration synchronization for FortiSwitch.

diagnose switch-controller trigger config-sync <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller trigger mac-sync

Trigger MAC sync for all managed FortiSwitches.

diagnose switch-controller trigger mac-sync

diagnose switch-controller trigger nac-mac-cache-sync

Triggers NAC MAC cache synchronization from FortiSwitch.

diagnose switch-controller trigger nac-mac-cache-sync <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

diagnose switch-controller trigger reset-hardware-counters

Triggers reset of port statistic counters for FortiSwitch.

diagnose switch-controller trigger reset-hardware-counters <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port list (range of ports separated by commas; eg 1,3,1-4,port6-7,port10-port11,internal).

string

diagnose switch-controller trigger restore-hardware-counters

Triggers restoration of port statistic counters from FortiSwitch hardware.

diagnose switch-controller trigger restore-hardware-counters <switch> <port>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string

<port>

Managed FortiSwitch port list (range of ports separated by commas; eg 1,3,1-4,port6-7,port10-port11,internal).

string

diagnose switch-controller tunnel-status

Switch-controller tunnel status.

diagnose switch-controller tunnel-status <switch>

Parameter

Description

Type

Size

<switch>

Managed FortiSwitch device ID.

string