config system lan-switch

Description: Configure LAN switch settings.

config system lan-switch
  set stp {enable | disable}
  config ports
    edit <name>
      set security-8021x-member-mode {enable | disable}
    next
  end
  set wired-security-mode [802.1X]
  set wired-security-group <security group ID>
end

Sample command:

config system lan-switch
  set stp enable
  config ports
    edit port1
      set security-8021x-member-mode enable
    next
    edit port4
      set security-8021x-member-mode enable
    next
    edit port2
      set security-8021x-member-mode enable
    next
  end
  set wired-security-mode 802.1X
  set wired-security-group test
end

Parameter	Description	Type	Size	Default
stp	Enable/disable spanning tree protocol.	option	-
wired-security-mode	Turn on 802.1x authentication for this interface. Only available on FortiExtender IPQ4019 platforms.	option	-
wired-security-group	Names of user groups that can authenticate with the 802.1X	option	-

config ports

Description: Configure LAN switch ports.

Parameter		Description	Type	Size	Default
config ports		Interfaces within the virtual switch.	option (Any of the physical LAN port IDs)	-	none
	Option Description port1 LAN port 1. port2 LAN port 2. port3 LAN port 3. port4 LAN port 4. security-8021x-member-mode Enable/disable 802.1x authentication on a port. Only available on FortiExtender IPQ4019 platforms.