Configure FortiSwitch

Steps to configure FortiSwitch are shown using the CLI only because you cannot complete all the steps using the GUI.

1. On FortiSwitch, open the CLI Console and enter the following commands to create the LLDP profile:

config switch lldp profile

edit fortifone

config med-network-policy

edit "voice"

set status enable

set vlan 100

next

edit "voice-signaling"

set status enable

set vlan 100

end

end

2. Configure the allowed and native VLANs to allow voice VLAN on the ports connecting to FortiFone. The VLAN ID specified for the native VLAN will be used for when FortiFone first boots up, with LLDP disabled.

Enter the following commands for the FortiSwitch port that FortiFone will be connecting to (in this example, port1):

config switch interface

edit port1

set allowed-vlans 100

set native-vlan 200

next

end

3. Apply the newly created LLDP profile to the port connecting to FortiFone. This is the port that FortiFone connects directly to on the switch (in this example, port1):

config switch physical-port

edit port1

set lldp-profile fortifone

set speed auto

next

end

4. Create the VLAN trunk. This port (in this example, port10) is the physical connection between FortiSwitch and FortiGate:

config switch trunk

edit "Gate_Trunk"

set members "port10"

set description "Gate Trunk"

next

end

5. To allow the configured trunk to carry traffic for different VLANs, set the allowed VLANs on the trunk interface connecting to FortiGate:

config switch interface

edit "Gate_Trunk"

set allowed-vlans 1,100,200

next

end