Scribd
Upload
2 views

Technical Tip_ How to configure the FortiLink inte... - Fortinet Community

This technical tip provides instructions for configuring the FortiLink interface on FortiGate to enable FortiSwitch integration within a Security Fabric topology. Key steps include enabling the switch controller feature, configuring IP/network mask, and ensuring DHCP server activation. Additionally, it notes that FortiSwitch models come with default auto-discovery ports for ease of connection.

Uploaded by

kushika
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
2 views

Technical Tip_ How to configure the FortiLink inte... - Fortinet Community

This technical tip provides instructions for configuring the FortiLink interface on FortiGate to enable FortiSwitch integration within a Security Fabric topology. Key steps include enabling the switch controller feature, configuring IP/network mask, and ensuring DHCP server activation. Additionally, it notes that FortiSwitch models come with default auto-discovery ports for ease of connection.

Uploaded by

kushika
Copyright
© © All Rights Reserved
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 5

Technical Tip: How to configure the FortiLink inte... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

Fortinet Community > Knowledge Base > FortiGate


> Technical Tip: How to configure the FortiLink inte...

scampos Staff

Created on 04-22-2025 12:02 AM Edited on 04-22-2025 12:02 AM By Anthony_E

Article Id 388269
Technical Tip: How to configure the FortiLink interface on the FortiGate end to
allow FortiSwitch integration.

Description This article describes how to configure the FortiLink interface on the FortiGate
end to allow FortiSwitch integration in the Security Fabric topology.
Scope FortiGate, FortiSwitch.

1 de 5 23/04/2025, 16:55
Technical Tip: How to configure the FortiLink inte... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

Solution Before connecting any FortiSwitch, it is necessary to enable the switch controller
feature (depending on the model, this can be enabled by default):

To enable this by CLI:

config system global


set switch-controller enable
end

The FortiLink interface is automatically created as an aggregate interface type. If


the FortiGate model does not support this type, it is created automatically as a
hardware switch.

It is also possible to see the FortiLink interface by going to WiFi & Switch

2 de 5 23/04/2025, 16:55
Technical Tip: How to configure the FortiLink inte... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

Controller -> FortiLink Interface.

To work correctly, it is necessary to check three configurations on the interface


level:
1. Configure the IP/Network Mask for the network.
2. Security Fabric Connection is enabled in the Administrative Access.
3. DHCP server is enabled.
4. Optionally, it is possible to set the Automatically authorize devices option to
avoid needing to manually authorize devices.

Note:
Some of these configurations are enabled by default if the interface addressing is
set to Dedicated to FortiSwitch.

To continue, at the System -> Settings menu, it is necessary to ensure that the
FortiGate is set to serve as an NTP server and that the FortiLink interface is
listening:

3 de 5 23/04/2025, 16:55
Technical Tip: How to configure the FortiLink inte... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

Every FortiSwitch model comes with a set of ports that are activated for FortiLink
auto-discovery by default. There is no need to configure a switch if the
connection for the FortiLink is via one of these ports.

The final four ports are the default auto-discovery FortiLink ports in v3.4.0 and
subsequent versions. To view which ports have auto-discovery enabled, it is
possible to use the FortiSwitch unit's show switch interface command.

The default auto-discovery ports for every switch model are listed in the
following:

4 de 5 23/04/2025, 16:55
Technical Tip: How to configure the FortiLink inte... - Fortinet Community https://community.fortinet.com/t5/tkb/articleprintpage/tkb-id/TKB20/artic...

Any physical interface on the FortiGate and FortiSwitch can be used for FortiLink
if it is manually configured.

If, after ensuring these configurations on the FortiGate, still issues related to the
FortiLink interface, refer to this KB article for troubleshooting: Technical Tip:
Managed FortiSwitch onboarding Troubleshooting Guide

FortiGate FortiLink FortiSwitch Interface Security Fabric System settings

79
 0 Kudos

Article Feedback

5 de 5 23/04/2025, 16:55

You might also like