Fortinet white logo
Fortinet white logo

CLI Reference

config switch-controller lldp-profile

config switch-controller lldp-profile

Note

This command is available for model(s): FortiGate 1000D, FortiGate 100F, FortiGate 101F, FortiGate 1100E, FortiGate 1101E, FortiGate 140E-POE, FortiGate 140E, FortiGate 1800F, FortiGate 1801F, FortiGate 2000E, FortiGate 200E, FortiGate 200F, FortiGate 201E, FortiGate 201F, FortiGate 2200E, FortiGate 2201E, FortiGate 2500E, FortiGate 2600F, FortiGate 3000D, FortiGate 300E, FortiGate 301E, FortiGate 3100D, FortiGate 3200D, FortiGate 3300E, FortiGate 3301E, FortiGate 3400E, FortiGate 3401E, FortiGate 3600E, FortiGate 3601E, FortiGate 3700D, FortiGate 3960E, FortiGate 3980E, FortiGate 400E Bypass, FortiGate 400E, FortiGate 400F, FortiGate 401E, FortiGate 401F, FortiGate 40F 3G4G, FortiGate 40F, FortiGate 4200F, FortiGate 4201F, FortiGate 500E, FortiGate 501E, FortiGate 600E, FortiGate 600F, FortiGate 601E, FortiGate 601F, FortiGate 60E DSLJ, FortiGate 60E DSL, FortiGate 60E-POE, FortiGate 60E, FortiGate 60F, FortiGate 61E, FortiGate 61F, FortiGate 70F, FortiGate 71F, FortiGate 800D, FortiGate 80E-POE, FortiGate 80E, FortiGate 80F Bypass, FortiGate 80F-POE, FortiGate 80F, FortiGate 81E-POE, FortiGate 81E, FortiGate 81F-POE, FortiGate 81F, FortiGate 900D, FortiGate 90E, FortiGate 91E, FortiGateRugged 60F 3G4G, FortiGateRugged 60F, FortiGateRugged 70F 3G4G, FortiGateRugged 70F, FortiWiFi 40F 3G4G, FortiWiFi 40F, FortiWiFi 60E DSLJ, FortiWiFi 60E DSL, FortiWiFi 60E, FortiWiFi 60F, FortiWiFi 61E, FortiWiFi 61F, FortiWiFi 80F 2R, FortiWiFi 81F 2R 3G4G-POE, FortiWiFi 81F 2R-POE, FortiWiFi 81F 2R.

It is not available for: FortiGate 5001E1, FortiGate 5001E.

Configure FortiSwitch LLDP profiles.

config switch-controller lldp-profile
    Description: Configure FortiSwitch LLDP profiles.
    edit <name>
        set 802 1-tlvs {option1}, {option2}, ...
        set 802 3-tlvs {option1}, {option2}, ...
        set auto-isl [disable|enable]
        set auto-isl-auth [legacy|strict|...]
        set auto-isl-auth-encrypt [none|mixed|...]
        set auto-isl-auth-identity {string}
        set auto-isl-auth-macsec-profile {string}
        set auto-isl-auth-reauth {integer}
        set auto-isl-auth-user {string}
        set auto-isl-hello-timer {integer}
        set auto-isl-port-group {integer}
        set auto-isl-receive-timeout {integer}
        set auto-mclag-icl [disable|enable]
        config custom-tlvs
            Description: Configuration method to edit custom TLV entries.
            edit <name>
                set oui {user}
                set subtype {integer}
                set information-string {user}
            next
        end
        config med-location-service
            Description: Configuration method to edit Media Endpoint Discovery (MED) location service type-length-value (TLV) categories.
            edit <name>
                set status [disable|enable]
                set sys-location-id {string}
            next
        end
        config med-network-policy
            Description: Configuration method to edit Media Endpoint Discovery (MED) network policy type-length-value (TLV) categories.
            edit <name>
                set status [disable|enable]
                set vlan-intf {string}
                set assign-vlan [disable|enable]
                set priority {integer}
                set dscp {integer}
            next
        end
        set med-tlvs {option1}, {option2}, ...
    next
end

config switch-controller lldp-profile

Parameter

Description

Type

Size

Default

802 1-tlvs

Transmitted IEEE 802.1 TLVs.

option

-

Option

Description

port-vlan-id

Port native VLAN TLV.

802 3-tlvs

Transmitted IEEE 802.3 TLVs.

option

-

Option

Description

max-frame-size

Maximum frame size TLV.

power-negotiation

PoE+ classification TLV.

auto-isl

Enable/disable auto inter-switch LAG.

option

-

enable

Option

Description

disable

Disable automatic MCLAG inter chassis link.

enable

Enable automatic MCLAG inter chassis link.

auto-isl-auth

Auto inter-switch LAG authentication mode.

option

-

legacy

Option

Description

legacy

No auto inter-switch-LAG authentication.

strict

Strict auto inter-switch-LAG authentication.

relax

Relax auto inter-switch-LAG authentication.

auto-isl-auth-encrypt

Auto inter-switch LAG encryption mode.

option

-

none

Option

Description

none

No auto inter-switch-LAG encryption.

mixed

Mixed auto inter-switch-LAG encryption.

must

Must auto inter-switch-LAG encryption.

auto-isl-auth-identity

Auto inter-switch LAG authentication identity.

string

Maximum length: 63

auto-isl-auth-macsec-profile

Auto inter-switch LAG macsec profile for encryption.

string

Maximum length: 63

auto-isl-auth-reauth

Auto inter-switch LAG authentication reauth period in seconds.

integer

Minimum value: 10 Maximum value: 3600

3600

auto-isl-auth-user

Auto inter-switch LAG authentication user certificate.

string

Maximum length: 63

auto-isl-hello-timer

Auto inter-switch LAG hello timer duration.

integer

Minimum value: 1 Maximum value: 30

3

auto-isl-port-group

Auto inter-switch LAG port group ID.

integer

Minimum value: 0 Maximum value: 9

0

auto-isl-receive-timeout

Auto inter-switch LAG timeout if no response is received.

integer

Minimum value: 0 Maximum value: 90

60

auto-mclag-icl

Enable/disable MCLAG inter chassis link.

option

-

disable

Option

Description

disable

Disable auto inter-switch-LAG.

enable

Enable auto inter-switch-LAG.

med-tlvs

Transmitted LLDP-MED TLVs (type-length-value descriptions).

option

-

Option

Description

inventory-management

Inventory management TLVs.

network-policy

Network policy TLVs.

power-management

Power manangement TLVs.

location-identification

Location identificaion TLVs.

name

Profile name.

string

Maximum length: 63

config custom-tlvs

Parameter

Description

Type

Size

Default

name

TLV name (not sent).

string

Maximum length: 63

oui

Organizationally unique identifier (OUI), a 3-byte hexadecimal number, for this TLV.

user

Not Specified

000000

subtype

Organizationally defined subtype.

integer

Minimum value: 0 Maximum value: 255

0

information-string

Organizationally defined information string.

user

Not Specified

config med-location-service

Parameter

Description

Type

Size

Default

name

Location service type name.

string

Maximum length: 63

status

Enable or disable this TLV.

option

-

disable

Option

Description

disable

Do not transmit this location service TLV.

enable

Transmit this location service TLV.

sys-location-id

Location service ID.

string

Maximum length: 63

config med-network-policy

Parameter

Description

Type

Size

Default

name

Policy type name.

string

Maximum length: 63

status

Enable or disable this TLV.

option

-

disable

Option

Description

disable

Do not transmit this network policy TLV.

enable

Transmit this TLV if a VLAN has been addded to the port.

vlan-intf

VLAN interface to advertise; if configured on port.

string

Maximum length: 15

assign-vlan

Enable/disable VLAN assignment when this profile is applied on managed FortiSwitch port.

option

-

disable

Option

Description

disable

Disable VLAN assignment when this profile is applied on port.

enable

Enable VLAN assignment when this profile is applied on port.

priority

Advertised Layer 2 priority.

integer

Minimum value: 0 Maximum value: 7

0

dscp

Advertised Differentiated Services Code Point (DSCP) value, a packet header value indicating the level of service requested for traffic, such as high priority or best effort delivery.

integer

Minimum value: 0 Maximum value: 63

0

config switch-controller lldp-profile

config switch-controller lldp-profile

Note

This command is available for model(s): FortiGate 1000D, FortiGate 100F, FortiGate 101F, FortiGate 1100E, FortiGate 1101E, FortiGate 140E-POE, FortiGate 140E, FortiGate 1800F, FortiGate 1801F, FortiGate 2000E, FortiGate 200E, FortiGate 200F, FortiGate 201E, FortiGate 201F, FortiGate 2200E, FortiGate 2201E, FortiGate 2500E, FortiGate 2600F, FortiGate 3000D, FortiGate 300E, FortiGate 301E, FortiGate 3100D, FortiGate 3200D, FortiGate 3300E, FortiGate 3301E, FortiGate 3400E, FortiGate 3401E, FortiGate 3600E, FortiGate 3601E, FortiGate 3700D, FortiGate 3960E, FortiGate 3980E, FortiGate 400E Bypass, FortiGate 400E, FortiGate 400F, FortiGate 401E, FortiGate 401F, FortiGate 40F 3G4G, FortiGate 40F, FortiGate 4200F, FortiGate 4201F, FortiGate 500E, FortiGate 501E, FortiGate 600E, FortiGate 600F, FortiGate 601E, FortiGate 601F, FortiGate 60E DSLJ, FortiGate 60E DSL, FortiGate 60E-POE, FortiGate 60E, FortiGate 60F, FortiGate 61E, FortiGate 61F, FortiGate 70F, FortiGate 71F, FortiGate 800D, FortiGate 80E-POE, FortiGate 80E, FortiGate 80F Bypass, FortiGate 80F-POE, FortiGate 80F, FortiGate 81E-POE, FortiGate 81E, FortiGate 81F-POE, FortiGate 81F, FortiGate 900D, FortiGate 90E, FortiGate 91E, FortiGateRugged 60F 3G4G, FortiGateRugged 60F, FortiGateRugged 70F 3G4G, FortiGateRugged 70F, FortiWiFi 40F 3G4G, FortiWiFi 40F, FortiWiFi 60E DSLJ, FortiWiFi 60E DSL, FortiWiFi 60E, FortiWiFi 60F, FortiWiFi 61E, FortiWiFi 61F, FortiWiFi 80F 2R, FortiWiFi 81F 2R 3G4G-POE, FortiWiFi 81F 2R-POE, FortiWiFi 81F 2R.

It is not available for: FortiGate 5001E1, FortiGate 5001E.

Configure FortiSwitch LLDP profiles.

config switch-controller lldp-profile
    Description: Configure FortiSwitch LLDP profiles.
    edit <name>
        set 802 1-tlvs {option1}, {option2}, ...
        set 802 3-tlvs {option1}, {option2}, ...
        set auto-isl [disable|enable]
        set auto-isl-auth [legacy|strict|...]
        set auto-isl-auth-encrypt [none|mixed|...]
        set auto-isl-auth-identity {string}
        set auto-isl-auth-macsec-profile {string}
        set auto-isl-auth-reauth {integer}
        set auto-isl-auth-user {string}
        set auto-isl-hello-timer {integer}
        set auto-isl-port-group {integer}
        set auto-isl-receive-timeout {integer}
        set auto-mclag-icl [disable|enable]
        config custom-tlvs
            Description: Configuration method to edit custom TLV entries.
            edit <name>
                set oui {user}
                set subtype {integer}
                set information-string {user}
            next
        end
        config med-location-service
            Description: Configuration method to edit Media Endpoint Discovery (MED) location service type-length-value (TLV) categories.
            edit <name>
                set status [disable|enable]
                set sys-location-id {string}
            next
        end
        config med-network-policy
            Description: Configuration method to edit Media Endpoint Discovery (MED) network policy type-length-value (TLV) categories.
            edit <name>
                set status [disable|enable]
                set vlan-intf {string}
                set assign-vlan [disable|enable]
                set priority {integer}
                set dscp {integer}
            next
        end
        set med-tlvs {option1}, {option2}, ...
    next
end

config switch-controller lldp-profile

Parameter

Description

Type

Size

Default

802 1-tlvs

Transmitted IEEE 802.1 TLVs.

option

-

Option

Description

port-vlan-id

Port native VLAN TLV.

802 3-tlvs

Transmitted IEEE 802.3 TLVs.

option

-

Option

Description

max-frame-size

Maximum frame size TLV.

power-negotiation

PoE+ classification TLV.

auto-isl

Enable/disable auto inter-switch LAG.

option

-

enable

Option

Description

disable

Disable automatic MCLAG inter chassis link.

enable

Enable automatic MCLAG inter chassis link.

auto-isl-auth

Auto inter-switch LAG authentication mode.

option

-

legacy

Option

Description

legacy

No auto inter-switch-LAG authentication.

strict

Strict auto inter-switch-LAG authentication.

relax

Relax auto inter-switch-LAG authentication.

auto-isl-auth-encrypt

Auto inter-switch LAG encryption mode.

option

-

none

Option

Description

none

No auto inter-switch-LAG encryption.

mixed

Mixed auto inter-switch-LAG encryption.

must

Must auto inter-switch-LAG encryption.

auto-isl-auth-identity

Auto inter-switch LAG authentication identity.

string

Maximum length: 63

auto-isl-auth-macsec-profile

Auto inter-switch LAG macsec profile for encryption.

string

Maximum length: 63

auto-isl-auth-reauth

Auto inter-switch LAG authentication reauth period in seconds.

integer

Minimum value: 10 Maximum value: 3600

3600

auto-isl-auth-user

Auto inter-switch LAG authentication user certificate.

string

Maximum length: 63

auto-isl-hello-timer

Auto inter-switch LAG hello timer duration.

integer

Minimum value: 1 Maximum value: 30

3

auto-isl-port-group

Auto inter-switch LAG port group ID.

integer

Minimum value: 0 Maximum value: 9

0

auto-isl-receive-timeout

Auto inter-switch LAG timeout if no response is received.

integer

Minimum value: 0 Maximum value: 90

60

auto-mclag-icl

Enable/disable MCLAG inter chassis link.

option

-

disable

Option

Description

disable

Disable auto inter-switch-LAG.

enable

Enable auto inter-switch-LAG.

med-tlvs

Transmitted LLDP-MED TLVs (type-length-value descriptions).

option

-

Option

Description

inventory-management

Inventory management TLVs.

network-policy

Network policy TLVs.

power-management

Power manangement TLVs.

location-identification

Location identificaion TLVs.

name

Profile name.

string

Maximum length: 63

config custom-tlvs

Parameter

Description

Type

Size

Default

name

TLV name (not sent).

string

Maximum length: 63

oui

Organizationally unique identifier (OUI), a 3-byte hexadecimal number, for this TLV.

user

Not Specified

000000

subtype

Organizationally defined subtype.

integer

Minimum value: 0 Maximum value: 255

0

information-string

Organizationally defined information string.

user

Not Specified

config med-location-service

Parameter

Description

Type

Size

Default

name

Location service type name.

string

Maximum length: 63

status

Enable or disable this TLV.

option

-

disable

Option

Description

disable

Do not transmit this location service TLV.

enable

Transmit this location service TLV.

sys-location-id

Location service ID.

string

Maximum length: 63

config med-network-policy

Parameter

Description

Type

Size

Default

name

Policy type name.

string

Maximum length: 63

status

Enable or disable this TLV.

option

-

disable

Option

Description

disable

Do not transmit this network policy TLV.

enable

Transmit this TLV if a VLAN has been addded to the port.

vlan-intf

VLAN interface to advertise; if configured on port.

string

Maximum length: 15

assign-vlan

Enable/disable VLAN assignment when this profile is applied on managed FortiSwitch port.

option

-

disable

Option

Description

disable

Disable VLAN assignment when this profile is applied on port.

enable

Enable VLAN assignment when this profile is applied on port.

priority

Advertised Layer 2 priority.

integer

Minimum value: 0 Maximum value: 7

0

dscp

Advertised Differentiated Services Code Point (DSCP) value, a packet header value indicating the level of service requested for traffic, such as high priority or best effort delivery.

integer

Minimum value: 0 Maximum value: 63

0