Optimizing the FortiSwitch network

Starting in FortiOS 6.4.2 with FortiSwitchOS 6.4.2, you can check your FortiSwitch network and get recommendations on how to optimize it. If you agree with the configuration recommendations, you can accept them, and they are automatically applied.

In FortiOS 7.2.4 with FortiSwitchOS 7.2.3, more tests have been added to the FortiSwitch recommendations to help optimize your network:

• If the poe-status has been enabled under the config switch-controller auto-config policy command, FortiOS recommends that you disable it to prevent unpredictable problems caused by connecting two power sourcing equipment (PSE) ports.
• If port 8 of an FS-108E or FS-108 unit is used for an inter-switch link (ISL), FortiOS recommends creating a custom auto-config policy.
• If the configured speed is less than the maximum speed for a switch port, FortiOS recommends changing the port speed to the maximum amount.
• Check if the inter-switch links (ISLs) and inter-chassis links (ICLs) are static to increase stability during events such as cable disconnections or power outages.

• When a multichassis LAG (MCLAG) is recommended between two FortiSwitch units, there is a Create MCLAG button available under WiFi & Switch Controller > Managed FortiSwitches in the Topology view.

NOTE: The Security Rating feature is available only when VDOMs are disabled.

To optimize your FortiSwitch network:

1. Go to Security Fabric > Security Rating.
2. Select Run Now (under Report Details in the right pane) to generate the Security Rating report.
   
   

   

3. Select the Optimization section.
   
   

   

4. Under Failed, select + next to each item to see more details in the right pane.
   
   

   

5. If you agree with a suggestion in the Recommendations section, select Apply for the change to be made.