Fortinet black logo

Administration Guide

Configuration deployment example

Copy Link
Copy Doc ID 962fb21b-9bd3-11eb-b70b-00505692583a:585561
Download PDF

Configuration deployment example

To configure LLDP:
  1. Configure LLDP global configuration settings using the config switch lldp settings command.
  2. Create LLDP profiles using the config switch lldp profile command to configure Type Length Values (TLVs) and other per-port settings.
  3. Assign LLDP profiles to physical ports.
  4. Apply VLAN to interface. (NOTE: LLDP profile values that are tied to VLANs will only be sent if the VLAN is assigned on the switch interface.)
    1. Configure the profile.

      show switch lldp profile Forti670i

      config switch lldp profile

      edit "Forti670i"

      config med-network-policy

      edit "voice"

      set dscp 46

      set priority 5

      set status enable

      set vlan 400

      next

      edit "guest-voice"

      next

      edit "guest-voice-signaling"

      next

      edit "softphone-voice"

      next

      edit "video-conferencing"

      next

      edit "streaming-video"

      set dscp 40

      set priority 3

      set status enable

      set vlan 400

      next

      edit "video-signalling"

      next

      end

      set med-tlvs inventory-management network-policy

      next

      end

    2. Configure the interface.

      show switch interface port4

      config switch interface

      edit "port4"

      set allowed-vlans 400

      set snmp auto

      next

      end

    3. Connect a phone with LLDP-MED capability to the interface. NOTE: Make certain the LLDP, Learning, and DHCP features are enabled.

      show switch physical-port port4

      config switch physical-port

      edit "port4"

      set lldp-profile "Forti670i"

      set speed auto

      next

      end

    4. Verify.

      show switch lldp neighbor-det port4

      Neighbor learned on port port4 by LLDP protocol

      Last change 12 seconds ago

      Last packet received 12 seconds ago

      Chassis ID: 10.105.251.40 (ip)

      System Name: FON-670i

      System Description:

      V12.740.335.12.B

      Time To Live: 60 seconds

      System Capabilities: BT

      Enabled Capabilities: BT

      MED type: Communication Device Endpoint (Class III)

      MED Capabilities: CP

      Management IP Address: 10.105.251.40

      Port ID: 00:a8:59:d8:f1:f6 (mac)

      Port description: WAN Port 10M/100M/1000M

      IEEE802.3, Power via MDI:

      Power devicetype: PD

      PSE MDI Power: Not Supported

      PSE MDI Power Enabled: No

      PSE Pair Selection: Can not be controlled

      PSE power pairs: Signal

      Power class: 1

      Power type: 802.3at off

      Power source: Unknown

      Power priority: Unknown

      Power requested: 0

      Power allocated: 0

      LLDP-MED, Network Policies:

      voice: VLAN: 400 (tagged), Priority: 5 DSCP: 46

      voice-signaling: VLAN: 400 (tagged), Priority: 4 DSCP: 35

      streaming-video: VLAN: 400 (tagged), Priority: 3 DSCP: 40

Configuration deployment example

To configure LLDP:
  1. Configure LLDP global configuration settings using the config switch lldp settings command.
  2. Create LLDP profiles using the config switch lldp profile command to configure Type Length Values (TLVs) and other per-port settings.
  3. Assign LLDP profiles to physical ports.
  4. Apply VLAN to interface. (NOTE: LLDP profile values that are tied to VLANs will only be sent if the VLAN is assigned on the switch interface.)
    1. Configure the profile.

      show switch lldp profile Forti670i

      config switch lldp profile

      edit "Forti670i"

      config med-network-policy

      edit "voice"

      set dscp 46

      set priority 5

      set status enable

      set vlan 400

      next

      edit "guest-voice"

      next

      edit "guest-voice-signaling"

      next

      edit "softphone-voice"

      next

      edit "video-conferencing"

      next

      edit "streaming-video"

      set dscp 40

      set priority 3

      set status enable

      set vlan 400

      next

      edit "video-signalling"

      next

      end

      set med-tlvs inventory-management network-policy

      next

      end

    2. Configure the interface.

      show switch interface port4

      config switch interface

      edit "port4"

      set allowed-vlans 400

      set snmp auto

      next

      end

    3. Connect a phone with LLDP-MED capability to the interface. NOTE: Make certain the LLDP, Learning, and DHCP features are enabled.

      show switch physical-port port4

      config switch physical-port

      edit "port4"

      set lldp-profile "Forti670i"

      set speed auto

      next

      end

    4. Verify.

      show switch lldp neighbor-det port4

      Neighbor learned on port port4 by LLDP protocol

      Last change 12 seconds ago

      Last packet received 12 seconds ago

      Chassis ID: 10.105.251.40 (ip)

      System Name: FON-670i

      System Description:

      V12.740.335.12.B

      Time To Live: 60 seconds

      System Capabilities: BT

      Enabled Capabilities: BT

      MED type: Communication Device Endpoint (Class III)

      MED Capabilities: CP

      Management IP Address: 10.105.251.40

      Port ID: 00:a8:59:d8:f1:f6 (mac)

      Port description: WAN Port 10M/100M/1000M

      IEEE802.3, Power via MDI:

      Power devicetype: PD

      PSE MDI Power: Not Supported

      PSE MDI Power Enabled: No

      PSE Pair Selection: Can not be controlled

      PSE power pairs: Signal

      Power class: 1

      Power type: 802.3at off

      Power source: Unknown

      Power priority: Unknown

      Power requested: 0

      Power allocated: 0

      LLDP-MED, Network Policies:

      voice: VLAN: 400 (tagged), Priority: 5 DSCP: 46

      voice-signaling: VLAN: 400 (tagged), Priority: 4 DSCP: 35

      streaming-video: VLAN: 400 (tagged), Priority: 3 DSCP: 40