Fortinet FortiSwitch Rugged-124D, Administration Manual

Page 1: ...FortiSwitch Standalone Mode Administration Guide...

Page 2: ...inet enters a binding written contract signed by Fortinet s General Counsel with a purchaser that expressly warrants that the identified product will perform according to certain expressly identified...

Page 3: ...henticating with a RADIUS server 12 Example Configuration 12 LACP Mode 14 Configuring the Trunk LAG Ports 14 Example Configuration 14 Viewing the Configured Trunk 16 TACACS 17 Administrative Accounts...

Page 4: ...Page 4 Change Log Date Change Description Sept 19 2014 Initial release...

Page 5: ...348B FortiSwitch 448B FortiSwitch 1024D FortiSwitch 1048D and FortiSwitch 3032D Before You Begin Before you start administrating your FortiSwitch unit it is assumed that you have completed the initial...

Page 6: ...be used for management 1 Go to System Network Interface and select Create New to create a management VLAN 2 Give the interface an appropriate name 3 Set Interface to internal 4 Set a VLAN ID 5 Assign...

Page 7: ...ortiSwitch in the example has no default VLAN configured to connect its internal interface to any physical port Figure 1 Using Port 48 of a FortiSwitch 448B unit Syntax config system interface edit in...

Page 8: ...interface as an inbound management interface In this example the internal interface is used as an inbound management interface Also the FortiSwitch has a default VLAN across all physical ports and its...

Page 9: ...config system interface edit wan2 set ip 10 105 142 10 255 255 255 0 set allowaccess ping https ssh set type physical next edit wan1 set mode dhcp set allowaccess ping https ssh set type physical set...

Page 10: ...10 105 142 19 255 255 255 0 set allowaccess ping https http ssh snmp telnet set type physical next edit internal set type physical end end Configuring Static Routing for the Internal Management Port...

Page 11: ...ror Using the web based manager 1 Go to Switch Port Mirror 2 Enable Status 3 Select a Destination Port 4 Select available ports to be used for Ingress Monitoring and Egress Monitoring Using the CLI co...

Page 12: ...ember list config match edit 1 set group name name set server name name end end end end 3 Configuring the switch interface for 802 1x config switch interface edit interface set security mode 802 1X se...

Page 13: ...tiGate 1 Creating a RADIUS user group config user radius edit R1 set server 192 160 10 98 next end 2 Creating a user group config user group edit 802group set member user1 R1 config match edit 1 set g...

Page 14: ...s to the Members list 5 Select OK Using the CLI config switch trunk edit name set description description_str set lacp speed fast slow set max miss heartbeats int set members ports set member withdraw...

Page 15: ...set mode lacp passive set port selection criteria src dst ip end end 2 Configure the switch ports to have native vlan assignments and allow those vlans on the port that will be the uplink port config...

Page 16: ...member ports as a LAG group config switch trunk edit trunk2 set members port4 port5 set description test set mode lacp passive set port selection criteria src dst ip end end Viewing the Configured Tr...

Page 17: ...e profile an appropriate name 3 Set Access Control as desired choosing between None Read Only or Read Write 4 Select OK Using the CLI config system accprofile edit name set admingrp none read read wri...

Page 18: ...etwork the user is allowed to access Configuring a User Account config user tacacs edit tacserver set authen type ascii auto chap ms_chap pap set authorization enable set key authorization_key set ser...

Page 19: ...set key temporary set server tacacs_server end 2 Configuring a TACACS user group config user group edit tacgroup set member tacserver config match edit 1 set server name tacserver set group name tacgr...

Page 20: ...D POE FortiSwitch 124D POE FortiSwitch 224D POE and FortiSwitch 324B POE Enabling PoE on a Port config switch physical port edit port set poe status enable end end Determining the PoE Power Capacity T...

Page 21: ......