Whatʼs new in FortiOS 7.2.4

The following list contains new managed FortiSwitchOS features added in FortiOS 7.2.4. Click on a link to navigate to that section for further information:

• A new CLI command reports device statistics when network access control (NAC) is enabled. The diagnose switch-controller telemetry show mac-stats command reports the MAC addresses of known devices, the number of packets and bytes received, the number of seconds since the last update, and the age of the MAC counter in seconds. For more details, see Viewing device statistics.

• NAC now supports more connected devices—up to 48 times the maximum number of managed FortiSwitch units supported on the FortiGate device. You can use the diagnose switch-controller mac-device nac known command to check the number of known devices. When 95 percent of the maximum number of devices is reached, a warning icon is displayed in the Matched NAC Devices widget in the FortiOS GUI. When the maximum number is reached, a switch-controller event is logged.
• The range and default values for the set nac-periodic-interval command (under config switch-controller system) have changed. The default value is now 60, and the range of values is now 5-180.
• The range and default values for the set dynamic-periodic-interval command (under config switch-controller system) have changed. The default value is now 60, and the range of values is now 5-180.

• You can now specify static entries for DHCP snooping and dynamic ARP inspection (DAI) by manually associating an IP address with a MAC address in the FortiOS CLI. For more details, see Configuring DHCP-snooping static entries.

• The FG-180xF and FG-260xF models can now manage 196 FortiSwitch units.

• There is now a set link-status command under config switch-controller managed-switch in the FortiOS CLI.

• New tests have been added to the FortiSwitch recommendations in the Security Fabric > Security Rating page to help optimize your network. The tests check the following:

  • If the poe-status has been enabled under the config switch-controller auto-config policy command, FortiOS recommends that you disable it to prevent unpredictable problems caused by connecting two power sourcing equipment (PSE) ports.
  • If port 8 of an FS-108E or FS-108 unit is used for an inter-switch link (ISL), FortiOS recommends creating a custom auto-config policy.
  • If the configured speed is less than the maximum speed for a switch port, FortiOS recommends changing the port speed to the maximum amount.
  • Check if the inter-switch links (ISLs) and inter-chassis links (ICLs) are static to increase stability during events such as cable disconnections or power outages.

  • When a multichassis LAG (MCLAG) is recommended between two FortiSwitch units, there is a Create MCLAG button available under WiFi & Switch Controller > Managed FortiSwitches in the Topology view.

• A new FortiView Internal Hubs monitor in FortiOS will report the IP addresses and the number of bytes collected with flow tracking from devices behind a managed FortiSwitch unit. If you drill down on one of the devices, you can see a chart displaying the devices and how they are connected. For more details, see Configuring flow tracking and export.

• You can now use the FortiOS CLI to configure the Power over Ethernet (PoE) port mode (IEEE802.3 AF or IEEE802.3 AT), port priority (critical, high, medium, or low), and port power (normal, perpetual, or perpetual fast) on managed switches. For more details, see Configuring PoE port settings.