Primeira parte

About this video

• Video Title: Primeira parte
• Channel: Jose Torres
• Speakers: Jose Torres
• Duration: 00:19:41

Overview

This video provides an in-depth look at the network architecture and management of Fortinet switches. It covers topics such as network layouts, the functionality of FortiLink interfaces, and an overview of the FortiManager console, including its limitations and potential bugs. The discussion also touches on switch configuration through templates and the available tools for monitoring and diagnostics.

Key takeaways

• Network Layouts: The video discusses network layouts created by Ricardo and potentially updated by Bastian, noting the use of templates and a core switch with distribution and access switches connected.
• FortiLink Interface: This is presented as an "intelligent uplink" and a logical interface used to connect switches to the FortiGate firewall. It functions similarly to a link aggregation interface and handles both management and user traffic.
• FortiManager: Described as a management console for all Fortinet devices, it can be compared to Extreme Management Center. However, it has limitations, is noted to be buggy, and not always the fastest interface.
• Switch Management: FortiSwitch units are managed by the FortiManager, with configurations applied through templates. Direct CLI configuration is discouraged, and while the manager offers monitoring tools like cable testing and topology views, its configuration capabilities for switches are limited.

The speaker highlights several limitations and drawbacks of the FortiManager:

• Limited Configuration Options: It cannot configure everything, and sometimes it's more useful to configure devices directly rather than through the FortiManager.
• Buggy Performance: The speaker mentions experiencing several bugs where features do not work as expected.
• Speed: It's noted as not being the fastest system.
• Switch Management Inadequacy: For switches specifically, the configuration capabilities within FortiManager are very limited, primarily serving as a monitoring tool rather than a robust configuration interface.
• Topology View Usability: While a topology view exists and has been fixed in later versions, the speaker finds its display method not very useful for a clear overview.

FortiSwitch units are configured by the FortiManager using templates. The concept is that switches act like "stupid access points" receiving their configuration from a central controller (the FortiGate/FortiManager). Instead of logging into individual switches via CLI, administrators use templates within the FortiManager to define settings. If a specific configuration is needed for only one switch, a unique template must be created for that particular switch.

Within the FortiManager, for switch management, the available diagnostic tools include:

• Port Health: The speaker notes this feature is not working in the FortiManager interface, although it might work elsewhere.
• Cable Test: This feature allows users to select one or multiple ports and run a diagnostic to get cable information. It's mentioned that performing this test might cause a short interruption or restart of the selected port(s).
• Port Status Overview: Users can view the status of ports.
• VLAN Information: Information about VLANs is accessible.
• Topology View: A topology view is available, though the speaker questions its usefulness due to the display format.