Configuring Network Settings with Fortigate Switch CLI

 



FortiGate Switch Standalone Kullanım(CLI)


FortiGate Switch'ler, FortiGate ile entegre kullanıldığında çok daha esnek ve güçlü bir yapı sunsa da, ağ tasarımlarına göre bazen bu switch'leri tek başına (standalone) konumlandırmanız gerekebilir.

FortiGate Switch'lerin standalone modda kurulumu, web arayüzü üzerinden oldukça kolay yapılsa da, CLI kullanımına alışkın olan ağ uzmanları için daha pratik olabilir. Bu yazıda, FortiGate Switch'i standalone modda yapılandırmak isteyenler için örnek bir CLI komut template’i hazırladım.


#####################################

1. Sistem Genel Ayarları


config system global

set hostname FORTI-SW

end


#####################################

2. Yönetici Hesap Ayarları


config system admin

edit  <Username>

set accprofile super_admin

set password <Password>

set allow-remove-admin-session enable

end


#####################################

3. DNS Ayarları


config system dns

set primary 8.8.8.8

set secondary 8.8.4.4

set domain kn.local

end


#####################################

4. NTP Sunucu Ayarları


config ntpserver

    edit 1

        set server 10.1.1.1

    next

end


#####################################


5. VLAN Tanımlamaları

config switch vlan

edit 1101

set description SW_MGMT_VLAN

     next

edit 1102

set description DATA_VLAN

      next

edit 1103

set description VOICE_VLAN

      end


#####################################

6. Ağ Arayüz Erişim Ayarları


config system interface

    edit SW_MGMT_VLAN

        set alias SW_MGMT

        set mode static

        set ip 10.1.101.10 255.255.255.0

        set allowaccess ping https ssh

        set vlanid 1101

        set interface internal

        set status up

end


#####################################

7. Statik Yönlendirme Ayarları

config router static

    edit 1

        set comment Default_Gateway

        set device SW_MGMT_VLAN

        set dst 0.0.0.0 0.0.0.0

        set gateway 10.1.101.1

    next

end


#####################################


8. Forti Switch Port Ayarları (Access Port)


config switch interface

    edit port5

        set description Access-INT

        set native-vlan 1102

        set stp-bpdu-guard enabled

        set rpvst-port enabled

    next

end


#####################################

9. Forti Switch Port Ayarları (Uplink Port)


config switch interface

   edit port48

        set description UPLINK-INTERFACE

        set allowed-vlans 1-4094

        set stp-root-guard enabled

        set rpvst-port enabled

   end


#####################################

10. Fiziksel Port CDP Ayarları


config switch physical-port

edit port48

set cdp-status tx-rx

end


#####################################

11. PortChannel (TRUNK) Ayarları


config switch trunk

    edit Forti_To_Cisco

        set description LACP

        set mode lacp-active

        set members port23 port24

        set port-selection-criteria src-dst-mac

        set lacp-speed fast

    next

end


config switch interface

    edit Forti_To_Cisco

        set description TRUNK-ALLOW

        set allowed-vlans 1-4094

        set dhcp-snooping trusted

        set stp-root-guard enabled

        set loop-guard enabled

        set edge-port disabled

        set rpvst-port enabled

    next

end


#####################################

12. SNMP Ayarları


config system snmp sysinfo

    set contact-info IT

    set description FORTIGATE-SW

    set location ANKARA

    set status enable

    set trap-high-cpu-interval 1min

    set trap-high-cpu-threshold 80

    set trap-log-full-threshold 90

    set trap-low-memory-threshold 80

    set trap-temp-alarm-threshold 70

    set trap-temp-warning-threshold 65

end


config system snmp community

edit 2

    set events cpu-high mem-low log-full intf-ip ent-conf-change llv psu-status fan-detect sensor-alarm

    config hosts

       edit 2

         set interface SW_MGMT_VLAN

         set ip 10.1.x.x 255.255.255.0

            next

      end

        set name SnmpCom

        set query-v1-status disable

        set trap-v1-status disable

set trap-v2c-status enable

set status enable

set query-v2c-status enable

set query-v2c-port 161

set trap-v2c-rport 162

set trap-v2c-lport 162

    next

end



Fortigate Switch Document - 1

Fortigate Switch Document - 2

Fortigate Switch Document - 3

Fortigate Switch Document - 4

Fortigate Switch Document - 5