New office LAN deployment
A new office uses a FortiGate 200F + FortiSwitch 248D-FPOE + FortiAP 231F bundle to deliver a complete Fortinet LAN/WLAN.
Fortinet · Network Security and SD-WAN
FortiSwitch
Enterprise switch family managed from FortiGate via FortiLink.
Quick answer
FortiSwitch is Fortinet's enterprise switch family, centrally managed from the FortiGate firewall via the FortiLink protocol. 1G/10G/25G/100G ports across access, distribution and data center tiers — fully integrated into the Security Fabric.
FortiSwitch is Fortinet's switch offering as an alternative to Cisco/Aruba/Juniper. It is managed via the FortiLink protocol on the FortiGate; no separate CLI/console is required.
Dynamic segmentation (MAC-based VLAN), 802.1X and MAC authentication provide enterprise NAC-grade control. PoE+ and PoE++ (90W) models power IoT, phones and APs.
The data center series (100G/400G) supports VXLAN and EVPN — suitable for spine-leaf architectures.
Key features
What it offers
- Single-pane management from FortiGate via FortiLink
- PoE+ and PoE++ support
- Dynamic segmentation (MAC-based)
- MCLAG and stacking
- Data center models (100G/400G)
- Auto-QoS (LLDP-MED)
- Spine-leaf topology support
- Standalone CLI or FortiLink mode
Tech Summary
Important technical data
- Family
- FortiSwitch 100 (entry), 200 (PoE), 400/500 (mid), 1000+ (DC)
- Port speed
- 1G, 2.5G, 10G, 25G, 40G, 100G, 400G
- PoE
- PoE+ (30W) / PoE++ (90W)
- Management
- FortiGate (FortiLink) or standalone CLI
- L3
- Static + dynamic routing (OSPF, BGP) on higher models
- Licensing
- Included with hardware; no extra license
Use CasesOffice Manufacturing Data center Hotel
When would you choose this product?
Factory OT switch
Industrial-temperature FortiSwitch (Rugged series) handles PLCs and HMIs in a manufacturing line.
Spine-leaf topology
Data center spine layer uses FortiSwitch 1024D + leaf FortiSwitch 524D; runs active-active with VXLAN/EVPN.
Hotel rooms IPTV + phones
Hotel room switches are FortiSwitch 124F-PoE; each room powers an IP phone and Smart TV (IPTV) from one PoE switch.
Who is it for?
Branch, campus and data center LAN designs.
Frequently Asked Questions
Frequently asked questions
What is the difference between FortiLink mode and standalone mode?
In FortiLink mode the switch is controlled by the FortiGate; policy, VLAN and port configuration come from the FortiGate. In standalone mode it is managed independently via classic CLI. Standalone may be preferred where no FortiGate exists.
Why does PoE++ matter?
Wi-Fi 6E/7 APs, IP video conferencing devices and certain IoT sensors exceed 30W PoE+; 60–90W PoE++ is required. FortiSwitch 524D-FPOE meets this need.
How hard is migration from Cisco Catalyst?
Partial automation tools exist for configuration conversion; custom rules are translated by Sora engineers. A typical 30-switch campus takes 2–4 weeks.
Stack vs MCLAG?
Stack: two+ switches behave as one — single IP, single config. MCLAG: independent switches active-active with link aggregation. Both are supported by FortiSwitch.
What is dynamic segmentation useful for?
Automatic VLAN assignment by MAC address / device type. Example: a printer always lands in VLAN 10; an IP phone in VLAN 20. Even if the user changes ports, policy follows the device.
Does the DC series support VXLAN?
Yes. The FortiSwitch DCS (Data Center Switch) series supports VXLAN and EVPN/BGP — suitable for NSX, VMware vSphere and Kubernetes spine-leaf environments.
Is there an industrial (rugged) option?
Yes. The FortiSwitch Rugged series supports -40°C to +75°C operation, IP30 protection and DIN-rail mounting — ideal for manufacturing, energy and outdoor cabinets.
What is the licensing model?
No extra license on FortiSwitch — all software features are included in the hardware. FortiCare annual support is optional (hardware warranty + RMA).
Is 802.1X RADIUS integration easy?
Yes. FortiSwitch + FortiGate + FortiAuthenticator (or Microsoft NPS) wire up 802.1X port-based authentication. Sora Yazılım deploys this widely in NAC projects.
How do I plan capacity?
Access tier: 1 port per user + 20% growth. PoE budget: total wattage of AP + IP phone + IoT. Uplink: 2x 10G access → distribution as a starting point; 25G/100G recommended in campus.
Vendor's official product page
Opens the vendor's original technical documentation and product page in a new tab.
Fortinet — FortiSwitch →From the same brand
Fortinet family — other products
FortiGate NGFW
AI-driven Next-Gen Firewall family (40F → 7081F).
DetailsFortiSASE
Cloud-delivered Secure Access Service Edge for hybrid workers.
DetailsFortiClient (ZTNA + EPP)
One agent for VPN, ZTNA, EDR and compliance.
DetailsFortiEDR / FortiXDR
Endpoint Detection & Response and extended detection/response.
DetailsComparable Solutions
Similar solutions from other brands
FortiSwitch licensing + deployment + support
Sora Yazılım handles licensing, deployment, training and ongoing management — all from a single team.