Managed Switch 4 Port

0 views
Skip to first unread message

Fairy Dawdy

unread,
Aug 4, 2024, 4:50:16 PM8/4/24
to gelhobbprearnos
Doyou have a rack of ethernet network switches with cables leading to who knows where?

Do you need to discover and identify the network devices attached to your switches?



Do you need a single app to map port usage on several different brands of switches?


Our Switch Port Mapper can discover and show you the MAC addresses and optionally IPv4 addresses of devices attached to the physical ports of your switches. Supply the SNMP access credentials for each switch and map them manually or as a list of switches.


I have a lab setup which will be eventually used on sites

I have one FortiGate which acts as the router and firewall and one managed switch hanging off this FortiGate with APs connected to it.

The legacy setup was a cisco switch and FortiGate where in the cisco switch acted a layer 2 switch for passing the wan connections to the FortiGate as well as the core switch providing connectivity to users.

It was a basic router on a stick configuration with the cisco switch hanging off the FortiGate and multiple wan interfaces used for SD/WAN connections and Lan interfaces for the users.

I am trying to replicate the same with the Forti switch but in a managed mode. I see the Forti VLANs are attached to the Forti link interface and the wan interfaces from the FortiGate are mapped to another interface(port1) on the FortiGate.

I configured the Forti switch with the same VLANs as the cisco switch and connected the FortiGate(port1) on the same ports the cisco switch, with an exclusive port (port4) just for the Forti link so that FortiGate can manage the Forti switch.

But I have not been having any luck with this configuration.

I need the wan interface from my provider equipment able to communicate with the FortiGate (port1) while connected on the Forti switch in a managed mode through Forti link on port4 . both of them have the same VLAN id 216(VLAN 216 on the the FortiGate interface port1 and Forti vlan 216 on Forti link interface port4) allowed through but there seems to be no communication

Any suggestions


If that is the case than I think you need to create those VLANs in the Fortilink interface and manage them through the SW controller. I don't think having two separate links to FSW will work well, it's better to build a LAG to have better throughput and use them as a single FLink for Router-on-a-stick functions.


Thank you, I shall try this. but we have a lot of WAN connections needed to be spanned across and corresponding SD WAN zones with tunnels across each WAN. it might get a bit complex to manage...

To keep it simple, we may keep a core switch doing only layer 2 for all the WAN connections and a trunk to the FG and then manage the downstream LANs via the FortiLANs/managed switch


I want to do this aswell I have two wan interfaces and two vdoms right now I want to add a wan side switch. How do I execute this? Am I exposing myself to risk cause of the allow access built into the switch? Do I plug the wan interfaces into the switch and keep my policies or do I just static the vlans and plocy them directly lan to vdomlinks? Cause when I first tried it with plugging my aggregate wan interfaces into my switch and having my policies go from wan to vdomlinks I was getting ip conflict warnings.. .. Also is having a wan side switch a good or bad idea on a ha configuration? I think if I plug my router into a random port on my switch and create my vlans and policy those to each vdom link and static route them I should be good?


The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.


Reading the DHCP specs, nothing obvious jumps out as supporting this, but (some?) Cisco switches offer a feature called "DHCP Server Port-Based Address Allocation" which achieves this; so can it be done by:


This is largely theoretical (I don't need to implement it), but I'm curious as to how "simple" it really is. Could I do it with my existing HP Procurve 2524 & dnsmasq, would I need a more sophisticated DHCP server, or would I need a new Cisco switch too?


DHCP option 82 is really what you are looking for, assuming you have a DHCP server that supports it. Once you have a DHCP request with the switch / port information in it, assigning an IP to it should be pretty trivial (just matching up the switch / port to what's in your database). Most production networks don't rely on DHCP though, because it's something else that can fail. This might be nice for the initial setup (have the machine pull an IP via DHCP, then configure itself to use that as a static IP), but I wouldn't suggest you try and run servers off of DHCP.


When selecting the right type of switch to meet your needs, one consideration is whether to use a managed or an unmanaged switch. The key difference is in the amount of control you have over the settings of the switch.


Unmanaged switches are designed to just plug in and run, with no settings to configure. These are fine to use in small networks with only basic needs. Managed switches, however, are fully configurable, are customizable, and provide a range of data on performance. Those attributes make them more suitable for larger networks and networks supporting critical activities.


Managed switches, with the flexibility and control they provide, are a must for networks where reliability and security are critical. Typically, such networks power enterprise-level businesses, government agencies, universities, and healthcare organizations.


A third type of switches, called smart managed switches, offers a compromise between cost and features. These switches are suited for small businesses that have limited budgets but need better security protection and want to improve their networks' performance.


I have a managed switch and need to have more ethernet ports. I can buy a used 5-port unmanaged switch for $10 so my question is if I connect the unmanaged switch to one of the ports on the managed switch (configured to use VLAN 100), will that make all of the other 4 ports on the unmanaged switch also be able to use VLAN 100? If it works like I think it will, it will solve my problem of not enough ports!


The behaviour of unmanaged switches exposed to VLANs is undefined, it's impossible to predict the outcome. They might pass them through, they might silently drop them, they might behave strangely in corner cases - just don't do it.


Either use them to extend a single VLAN, untagged (connected to an untagged/ single VLAN) access port of your managed switch or look for a managed one, they aren't necessarily much more expensive (also take a look at second hand offers).


I do have an old device. I setup the device to be a dumb access point but just not configuring WiFi for it. Everything seems to work with my VLAN identification. I just don't know why I can't update opkg?


The DGS-1210-10 Smart Managed Switch is engineered to meet the demands of SMBs, offering a comprehensive suite of features designed for high performance, reliable connectivity, and efficient network management. With 10x Gigabit Ethernet ports, these switches are built to support a wide range of business applications, from surveillance systems to VoIP solutions, ensuring your network remains powerful and flexible. 8 are dedicated GbE Ports, and 2 are optical SFP ports for high-speed networking. Easy to scale and maintain, it offers detailed management tools for efficient network oversight. Incorporating Advanced Traffic Management and Layer 2+ capabilities, the switch maximizes network efficiency with bandwidth control, loopback detection and cable diagnostics, QoS, VLAN support, and static routing, significantly easing congestion. Comprehensive Security features including ACL, 802.1X/RADIUS, ARP Spoofing Prevention, and the D-Link Safeguard Engine. Easy to scale and maintain, it offers detailed web management tools for efficient network oversight. Optionally manageable via Nuclias Connect for scalable, flexible control, and insightful reporting. Meeting NDAA compliance and backed by a lifetime warranty, the DGS-1210-10 draws on D-Link's 35 years of experience in network solutions, promising a dependable and advanced networking setup.


The DGS-1210 Smart Managed Switch Series is favored across diverse sectors from Fortune 500 firms, government, hospitality, education and more. The broad applicability makes it best selling for its versatility, dependability, and great price.


Select Surveillance Mode in the Web UI to take advantage of easy-to-use surveillance features which enable you to manage your surveillance network effortlessly. It automatically detects your security devices and segments them into a dedicated Auto Surveillance VLAN to help handle video surveillance traffic more securely and efficiently.


For more information on our business-class solution, reseller pricing, distribution availability, and partner program please reach out to our commercial sales team at 888-354-6574 or solu...@us.dlink.com

3a8082e126
Reply all
Reply to author
Forward
0 new messages