Fortinet white logo
Fortinet white logo

Administration Guide

Introduction

Introduction

FortiSwitch Manager (FSWM) is the on-premise management platform for the FortiSwitch product. FortiSwitch units connect to FSWM over the layer-3 network. You can configure a large number of FortiSwitch units with this FortiSwitch-management-only platform. FortiSwitch Manager provides a user experience consistent with the FortiLink Switch Controller.

This document provides the following information for FortiSwitch Manager 7.2.4 build 0129.

Supported models

FortiSwitch Manager 7.2.4 supports the following models:

FortiSwitch 1xx FS-108E, FS-108E-POE, FS-108E-FPOE, FS-108F, FS-108F-POE, FS-108F-FPOE, FS-124E, FS-124E-POE, FS-124E-FPOE, FS-124F, FS-124F-POE, FS-124F-FPOE, FS-148E, FS-148E-POE, FS-148F, FS-148F-POE, FS-148F-FPOE
FortiSwitch 2xx FS-224D-FPOE, FS-224E, FS-224E-POE, FS-248D, FS-248E-POE, FS-248E-FPOE
FortiSwitch 4xx FS-424E, FS-424E-POE, FS-424E-FPOE, FS-424E-Fiber, FS-M426E-FPOE, FS-448E, FS-448E-POE, FS-448E-FPOE
FortiSwitch 5xx FS-524D, FS-524D-FPOE, FS-548D, FS-548D-FPOE

FortiSwitch 6xx

FS-624F, FS-624F-FPOE, FS-648F, FS-648F-FPOE

FortiSwitch 1xxx FS-1024D, FS-1024E, FS-1048E, FS-T1024E

FortiSwitch 2xxx

FS-2048F

FortiSwitch 3xxx FS-3032E
FortiSwitch Rugged FSR-112D-POE, FSR-124D, FSR-424F-POE

Refer to the FortiSwitch feature matrix for details about the features supported by each FortiSwitch model.

Compatibility

FortiSwitch Manager 7.2.4 is compatible with FortiSwitchOS 6.4.6 build 0470 or later.

Web browser support

Web browser
  • Microsoft Edge

  • Mozilla Firefox version 98

  • Google Chrome version 99

  • Other web browsers might function correctly but are not supported by Fortinet.

Virtualization environment support

Hypervisor

Recommended versions

Citrix Hypervisor

  • 8.1 Express Edition, Dec 17, 2019

Linux KVM
  • Ubuntu 18.0.4 LTS

  • Red Hat Enterprise Linux release 8.4

  • SUSE Linux Enterprise Server 12 SP3 release 12.3

Microsoft Windows Server
  • 2012R2 with Hyper-V role

Windows Hyper-V Server
  • 2019

Open source XenServer

  • Version 3.4.3

  • Version 4.1 and later

VMware ESX

  • Versions 4.0 and 4.1

VMware ESXi

  • Versions 4.0, 4.1, 5.0, 5.1, 5.5, 6.0, 6.5, 6.7, and 7.0.

System requirements

Number of managed FortiSwitch units

vCPU

Memory (GB)

Hard disk

1-10

8 (minimum 4)

8 (minimum 4)

1 TB (minimum 32 GB)

10-100

16 (minimum 8)

16 (minimum 8)

1 TB (minimum 32 GB)

100-1,000

32

32 (minimum 16)

1 TB (minimum 32 GB)

1,000-2,500

32

32 (minimum 16)

1 TB (minimum 32 GB)

Supported Switch Controller features

Switch Controller Features FortiSwitch Models

Centralized VLAN Configuration

D-series, E-series, F-series

Switch POE Control

D-series, E-series

Link Aggregation Configuration

D-series, E-series, F-series

Spanning Tree Protocol (STP)

D-series, E-series, F-series

LLDP/MED

D-series, E-series, F-series

IGMP Snooping

D-series, E-series, F-series

802.1X Authentication (Port-based, MAC-based, MAB)

D-series, E-series, F-series

Syslog Collection

D-series, E-series, F-series

DHCP Snooping

D-series, E-series, F-series

LAG support

D-series, E-series, F-series

sFlow

Not supported on FS-1xxE Series

Dynamic ARP Inspection (DAI)

D-series, E-series, F-series

Port Mirroring

D-series, E-series

RADIUS Accounting

D-series, E-series, F-series

Centralized Configuration

D-series, E-series, F-series

STP BDPU Guard, Root Guard, Edge Port

D-series, E-series, F-series

Loop Guard

D-series, E-series, F-series

Switch admin Password

D-series, E-series

Storm Control

D-series, E-series, F-series

802.1X-Authenticated Dynamic VLAN Assignment

D-series, E-series, F-series

QoS

Not supported on FSR-112D-POE

Centralized Firmware Management

D-series, E-series, F-series

Automatic network detection and configuration

D-series, E-series

Dynamic VLAN assignment by group name

D-series, E-series

Sticky MAC addresses

D-series, E-series, F-series

NetFlow and IPFIX flow tracking and export

D-series, E-series

MSTP instances

D-series, E-series, F-series

QoS statistics

D-series, E-series

Configuring SNMP

D-series, E-series, F-series

IPv4 source guard

FSR-124D, FS-224D-FPOE, FS-248D, FS-424D-POE, FS-424D-FPOE, FS-448D-POE, FS-448D-FPOE, FS-424D, FS-448D, FS-2xxE, and FS-4xxE

Point-to-point layer-2 network supported

D-series, E-series, F-series

Dynamic detection of LLDP neighbor devices

D-series, E-series

Explicit congestion notification (ECN)

FS-1024D, FS-1048D, FS-1048E, FS-3032D, FS-3032E, FS-4xxE, and FS-5xxD

Aggregation mode selection for trunk members

D-series, E-series

Multiple attribute values sent in a RADIUS Access-Request

D-series, E-series

PTP transparent-clock mode

FS-1048E, FS-224D, FS-224E, FS-3032D, FS-3032E, FS-424D, FS-4xxE, and FS-5xxD

Rapid PVST interoperation

D-series, E-series, F-series

Flash port LEDs

D-series, E-series

Cable diagnostics

Not supported on FSR-112D-POE, FS-1024D, FS-1048D, FS-1048E, FS-3032D, or FS-3032E

Flow control

D-series, E-series, F-series

Ingress pause metering

200 series, 400D and 400E series, 500 series, FS-1024D, FS-1048D, FS-1048E, and FS-3032D

RVI

448E, 448E-FPOE, 448E-POE, 424E-Fiber, 500 series, 1024D, 1024E,1048E, T1024E, 3032E

Static routing (IPv4/IPv6)

D-series, E-series, F-series (except FSR-112DPOE)

VRF (IPv4/IPv6)

500 series, 1024D, 1024E,1048E, T1024E, 3032E

Automation stitches

D-series, E-series, F-series

Templates for managed-switch configurations

D-series, E-series, F-series

DHCP-snooping static entries (IPv4)

D-series, E-series, F-series

NOTE: The following features are not supported:

  • High availability (HA)
  • FortiLink layer-2 mode
  • UTM/security services (These are not needed because FortiSwitch Manager is not in the data path.)
  • Network access control (NAC)
  • Hardware switch
  • Remote SPAN (RSPAN)
  • Quarantines
  • Integration with FortiAnalyzer
  • VDOMs

Introduction

Introduction

FortiSwitch Manager (FSWM) is the on-premise management platform for the FortiSwitch product. FortiSwitch units connect to FSWM over the layer-3 network. You can configure a large number of FortiSwitch units with this FortiSwitch-management-only platform. FortiSwitch Manager provides a user experience consistent with the FortiLink Switch Controller.

This document provides the following information for FortiSwitch Manager 7.2.4 build 0129.

Supported models

FortiSwitch Manager 7.2.4 supports the following models:

FortiSwitch 1xx FS-108E, FS-108E-POE, FS-108E-FPOE, FS-108F, FS-108F-POE, FS-108F-FPOE, FS-124E, FS-124E-POE, FS-124E-FPOE, FS-124F, FS-124F-POE, FS-124F-FPOE, FS-148E, FS-148E-POE, FS-148F, FS-148F-POE, FS-148F-FPOE
FortiSwitch 2xx FS-224D-FPOE, FS-224E, FS-224E-POE, FS-248D, FS-248E-POE, FS-248E-FPOE
FortiSwitch 4xx FS-424E, FS-424E-POE, FS-424E-FPOE, FS-424E-Fiber, FS-M426E-FPOE, FS-448E, FS-448E-POE, FS-448E-FPOE
FortiSwitch 5xx FS-524D, FS-524D-FPOE, FS-548D, FS-548D-FPOE

FortiSwitch 6xx

FS-624F, FS-624F-FPOE, FS-648F, FS-648F-FPOE

FortiSwitch 1xxx FS-1024D, FS-1024E, FS-1048E, FS-T1024E

FortiSwitch 2xxx

FS-2048F

FortiSwitch 3xxx FS-3032E
FortiSwitch Rugged FSR-112D-POE, FSR-124D, FSR-424F-POE

Refer to the FortiSwitch feature matrix for details about the features supported by each FortiSwitch model.

Compatibility

FortiSwitch Manager 7.2.4 is compatible with FortiSwitchOS 6.4.6 build 0470 or later.

Web browser support

Web browser
  • Microsoft Edge

  • Mozilla Firefox version 98

  • Google Chrome version 99

  • Other web browsers might function correctly but are not supported by Fortinet.

Virtualization environment support

Hypervisor

Recommended versions

Citrix Hypervisor

  • 8.1 Express Edition, Dec 17, 2019

Linux KVM
  • Ubuntu 18.0.4 LTS

  • Red Hat Enterprise Linux release 8.4

  • SUSE Linux Enterprise Server 12 SP3 release 12.3

Microsoft Windows Server
  • 2012R2 with Hyper-V role

Windows Hyper-V Server
  • 2019

Open source XenServer

  • Version 3.4.3

  • Version 4.1 and later

VMware ESX

  • Versions 4.0 and 4.1

VMware ESXi

  • Versions 4.0, 4.1, 5.0, 5.1, 5.5, 6.0, 6.5, 6.7, and 7.0.

System requirements

Number of managed FortiSwitch units

vCPU

Memory (GB)

Hard disk

1-10

8 (minimum 4)

8 (minimum 4)

1 TB (minimum 32 GB)

10-100

16 (minimum 8)

16 (minimum 8)

1 TB (minimum 32 GB)

100-1,000

32

32 (minimum 16)

1 TB (minimum 32 GB)

1,000-2,500

32

32 (minimum 16)

1 TB (minimum 32 GB)

Supported Switch Controller features

Switch Controller Features FortiSwitch Models

Centralized VLAN Configuration

D-series, E-series, F-series

Switch POE Control

D-series, E-series

Link Aggregation Configuration

D-series, E-series, F-series

Spanning Tree Protocol (STP)

D-series, E-series, F-series

LLDP/MED

D-series, E-series, F-series

IGMP Snooping

D-series, E-series, F-series

802.1X Authentication (Port-based, MAC-based, MAB)

D-series, E-series, F-series

Syslog Collection

D-series, E-series, F-series

DHCP Snooping

D-series, E-series, F-series

LAG support

D-series, E-series, F-series

sFlow

Not supported on FS-1xxE Series

Dynamic ARP Inspection (DAI)

D-series, E-series, F-series

Port Mirroring

D-series, E-series

RADIUS Accounting

D-series, E-series, F-series

Centralized Configuration

D-series, E-series, F-series

STP BDPU Guard, Root Guard, Edge Port

D-series, E-series, F-series

Loop Guard

D-series, E-series, F-series

Switch admin Password

D-series, E-series

Storm Control

D-series, E-series, F-series

802.1X-Authenticated Dynamic VLAN Assignment

D-series, E-series, F-series

QoS

Not supported on FSR-112D-POE

Centralized Firmware Management

D-series, E-series, F-series

Automatic network detection and configuration

D-series, E-series

Dynamic VLAN assignment by group name

D-series, E-series

Sticky MAC addresses

D-series, E-series, F-series

NetFlow and IPFIX flow tracking and export

D-series, E-series

MSTP instances

D-series, E-series, F-series

QoS statistics

D-series, E-series

Configuring SNMP

D-series, E-series, F-series

IPv4 source guard

FSR-124D, FS-224D-FPOE, FS-248D, FS-424D-POE, FS-424D-FPOE, FS-448D-POE, FS-448D-FPOE, FS-424D, FS-448D, FS-2xxE, and FS-4xxE

Point-to-point layer-2 network supported

D-series, E-series, F-series

Dynamic detection of LLDP neighbor devices

D-series, E-series

Explicit congestion notification (ECN)

FS-1024D, FS-1048D, FS-1048E, FS-3032D, FS-3032E, FS-4xxE, and FS-5xxD

Aggregation mode selection for trunk members

D-series, E-series

Multiple attribute values sent in a RADIUS Access-Request

D-series, E-series

PTP transparent-clock mode

FS-1048E, FS-224D, FS-224E, FS-3032D, FS-3032E, FS-424D, FS-4xxE, and FS-5xxD

Rapid PVST interoperation

D-series, E-series, F-series

Flash port LEDs

D-series, E-series

Cable diagnostics

Not supported on FSR-112D-POE, FS-1024D, FS-1048D, FS-1048E, FS-3032D, or FS-3032E

Flow control

D-series, E-series, F-series

Ingress pause metering

200 series, 400D and 400E series, 500 series, FS-1024D, FS-1048D, FS-1048E, and FS-3032D

RVI

448E, 448E-FPOE, 448E-POE, 424E-Fiber, 500 series, 1024D, 1024E,1048E, T1024E, 3032E

Static routing (IPv4/IPv6)

D-series, E-series, F-series (except FSR-112DPOE)

VRF (IPv4/IPv6)

500 series, 1024D, 1024E,1048E, T1024E, 3032E

Automation stitches

D-series, E-series, F-series

Templates for managed-switch configurations

D-series, E-series, F-series

DHCP-snooping static entries (IPv4)

D-series, E-series, F-series

NOTE: The following features are not supported:

  • High availability (HA)
  • FortiLink layer-2 mode
  • UTM/security services (These are not needed because FortiSwitch Manager is not in the data path.)
  • Network access control (NAC)
  • Hardware switch
  • Remote SPAN (RSPAN)
  • Quarantines
  • Integration with FortiAnalyzer
  • VDOMs