FortiSwitch (FortiLink) Cookbook
FortiLink configuration
FortiLink configuration
- From Network > Interfaces, create a 802.3ad port
- Add the two member ports that will form the LAG and will be interconnected from the FortiGate-Master to the distribution 1 and 2.
- Select the addressing mode “Dedicated to FortiSwitch.”
- By default, the FortiLink segment is configured in an APIPA address range. In the present context, we will make sure that this segment is routable in order to validate certain metrics on the FortiSwitch GUI. Ensure in an enterprise context that this environment is accessible only through legitimate and restricted privileges.
- For the purpose of the exercise, we will ensure that FortiSwitch are not automatically authorized to validate certain steps. But it is quite possible to speed up the process and allow automatic authorization.
- Make sure at first that split interface is enabled (until MCLAG configuration).
- Connect the FG1-Master to Disti-1 (port9 to port48).
- Confirm the discovery of the FortiSwitch unit in the logs.
- Authorize the Disti-1 thereafter.
- At this point, the switch will reboot and will be converted from standalone to managed mode.
- The switch receives an IP address in the previously configured segment.
- The CAPWAP tunnel will appear as UP in the logs.
- Disti-1 will now be managed.
- Link the Distribution 1 to Distribution 2 as follows:
- Allow the addition of the Disti2.
FortiLink configuration
FortiLink configuration
- From Network > Interfaces, create a 802.3ad port
- Add the two member ports that will form the LAG and will be interconnected from the FortiGate-Master to the distribution 1 and 2.
- Select the addressing mode “Dedicated to FortiSwitch.”
- By default, the FortiLink segment is configured in an APIPA address range. In the present context, we will make sure that this segment is routable in order to validate certain metrics on the FortiSwitch GUI. Ensure in an enterprise context that this environment is accessible only through legitimate and restricted privileges.
- For the purpose of the exercise, we will ensure that FortiSwitch are not automatically authorized to validate certain steps. But it is quite possible to speed up the process and allow automatic authorization.
- Make sure at first that split interface is enabled (until MCLAG configuration).
- Connect the FG1-Master to Disti-1 (port9 to port48).
- Confirm the discovery of the FortiSwitch unit in the logs.
- Authorize the Disti-1 thereafter.
- At this point, the switch will reboot and will be converted from standalone to managed mode.
- The switch receives an IP address in the previously configured segment.
- The CAPWAP tunnel will appear as UP in the logs.
- Disti-1 will now be managed.
- Link the Distribution 1 to Distribution 2 as follows:
- Allow the addition of the Disti2.
