Configuring loop guard

A loop in a layer-2 network results in broadcast storms that have far-reaching and unwanted effects. Fortinet loop guard helps to prevent loops. When loop guard is enabled on a switch port, the port monitors its subtending network for any downstream loops. Loop guard and STP should be used separately for loop protection. By default, loop guard is disabled on all ports.

Use the following commands to configure loop guard on a FortiSwitch port:

config switch-controller managed-switch

edit <FortiSwitch_serial_number>

config ports

edit <port_name>

set loop-guard {enabled | disabled}

set loop-guard-timeout <0-120 minutes>

end

end

For example:

config switch-controller managed-switch

edit S524DF4K15000024

config ports

edit port1

set loop-guard enabled

set loop-guard-timeout 10

end

end