FortiOS 5.6 Online Help Link FortiOS 5.4 Online Help Link FortiOS 5.2 Online Help Link FortiOS 5.0 Online Help Link

Home > Online Help

> Chapter 20 - Managing a FortiSwitch with a FortiGate > Port Configuration

FortiSwitch Port Features

You can configure the FortiSwitch port feature settings from the FortiGate using the FortiGate web-based manager or CLI commands.

FortiSwitch Ports Display

The WiFi & Switch Controller > FortiSwitch Ports page displays port information about each of the managed switches.

The following figure shows the display for a FortiSwitch 108D-POE:



The switch faceplate displays:

  • the active ports (green)
  • the POE-enabled ports (blue rectangle)
  • the FortiLink port (link icon)

The POE Status displays the total power budget, and the actual power currently allocated.

The allocated power displays a blue bar for the used power (currently being consumed) and a green bar for the reserved power (power available for additional devices on the POE ports). See the following figures:



Each entry in the port list displays the following information:

  • Port status (red for down, green for up)
  • Port name
  • Native VLAN
  • Allowed VLANs
  • POE status

Configuring Ports Using the Web Manager

You can use the web manager to configure VLANs on the port (see VLAN Configuration), or to enable/disable POE on a port.

Enable or Disable POE on a port

Follow these instructions to configure POE on a port:

  1. Navigate to WiFi & Switch Controller > FortiSwitch Ports
  2. Click on a row to select the port.
  3. Right-click the row, select POE and select Enable POE or Disable POE


Note: when you select a row in the port table, you can also use the Assign VLANs and PoE menus (located just below the page banner), instead of the right-click menu, to configure the values.

Configuring Ports Using the FortiGate CLI

You can configure the following FortiSwitch port settings using the FortiGate CLI:

  • Set port speed and admin status
  • Configure vlan on the port (see VLAN Configuration)
  • DHCP trust setting
  • Enable or disable POE 

Configuring Port Speed and Admin Status

Use the following commands to set port speed and other basis port settings:

config switch-controller managed-switch

edit <switch>

config ports

edit <port>

set description <text>

set speed <speed>

set status {down | up}


Configuring DHCP Snooping

Set the port as a trusted or untrusted DHCP-snooping interface:

config switch-controller managed-switch

edit <switch-id>

config ports

edit <port name>

set dhcp-snooping {trusted | untrusted}

Configuring POE

The following POE CLI commands are available starting in FortiSwitchOS 3.3.0:

Enable PoE on the Port

config switch-controller managed-switch

edit <switch-id>

config ports

edit <port name>

set poe-status {enable | disable}


Reset the POE port

The following command resets POE on the port

execute switch-controller poe-reset <fortiswitch-id> <port>

Display general POE status

get switch-controller <fortiswitch-id> <port>


The following example displays the POE status for port 6 on the specified switch:


# get switch-controller poe FS108D3W14000967 port6

Port(6) Power:3.90W, Power-Status: Delivering Power

Power-Up Mode: Normal Mode

Remote Power Device Type: IEEE802.3AT PD

Power Class: 4

Defined Max Power: 30.0W, Priority:3

Voltage: 54.00V

Current: 78mA

Configuring STP

Starting in FortiSwitch release 3.4.2, STP is enabled by default for the non-FortiLink ports on the managed FortiSwitches. Use the following commands to enable or disable STP on FortiSwitch ports:

config switch-controller managed-switch

edit <switch-id>

config ports

edit <port name>

set stp-state (enabled | disabled)