Description
FortiSwitch Secure Access switches deliver a Secure, Simple, Scalable Ethernet solution with outstanding security, performance and manageability for threat conscious small to mid-sized businesses, distributed enterprises and branch offices. Tightly integrated into the FortiGate® Network Security Platform, the FortiSwitch Secure Access switches can be managed directly from the familiar FortiGate interface. This single pane of glass management provides complete visibility and control of all users and devices on the network, regardless of how they connect.
Security Fabric Integration
Reduces complexity and decreases management cost with network security functions managed through a single console via FortiGate. This integration allows all users to be authenticated against the same user database, regardless of whether they connect to the wired or wireless network, including temporary guest users.
In addition, same security policy can apply to a user or device regardless of how or where they connect to the network.
Simplify Network Deployment
The Power over Ethernet (PoE) capability in some models, enables simple installation of wireless Access Points and IP phones in the network.
Highlights
- Secure Access switches suitable for wiringcloset and desktop installations
- Ideal for converged network environments; enabling voice, data and wireless traffic to be delivered across a single network
- Devices are identified and users authenticated prior to being granted access to the network
- Centralized security and access management from FortiGate interface
- Up to 48 ports in a compact 1 RU form factor
- Stackable up to 300 switches per FortiGate depending on model
- Supports Wire-speed switching and Store and Forward forwarding mode
Features:
| FortiSwitch FortiLink Mode (With FortiGate) | |
|---|---|
| Management and Configuration | |
| Auto Discovery of Multiple Switches | Yes |
| Number of Managed Switches per FortiGate | 8 to 256 Depending on FortiGate Model (Please refer to admin guide) |
| FortiLink Stacking (Auto Inter-Switch Links) | Yes |
| Software Upgrade of Switches | Yes |
| Centralized VLAN Configuration | Yes |
| Switch POE Control | Yes |
| Link Aggregation Configuration | Yes |
| Spanning Tree | Yes |
| LLDP/MED | Yes |
| IGMP Snooping | Yes (not supported on 1xxE-Series) |
| L3 Routing and Services | Yes (FortiGate) |
| Policy-Based Routing | Yes (FortiGate) |
| Virtual Domain | Yes (FortiGate) |
| Security and Visibility | |
| 802.1x Authentication (Port-based, MAC-based, MAB) | Yes |
| Syslog Collection | Yes |
| DHCP Snooping | Yes |
| Device Detection | Yes |
| MAC Black/While Listing | Yes (FortiGate) |
| Policy Control of Users and Devices | Yes (FortiGate) |
| UTM Features | |
| Firewall | Yes (FortiGate) |
| IPC, AV, Application Control, Botnet | Yes (FortiGate) |
| High Availability | |
| Support FortiLink FortiGate in HA Cluster | Yes |
| LAG support for FortiLink Connection | Yes |
| Active-Active Split LAG from FortiGate to FortiSwitches for Advanced Redundancy | Yes (with FS-2xx, 4xx, 5xx) |
| FortiSwitch Standalone Mode |
FortiSwitch 2XXE Series |
FortiSwitch 1XXE Series |
|
|---|---|---|---|
| Layer 2 | |||
| Jumbo Frames | Yes | Yes | Yes |
| Auto-negotiation for Port Speed and Duplex | Yes | Yes | Yes |
| IEEE 802.1D MAC Bridging/STP | Yes | Yes | Yes |
| IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) | Yes | Yes | Yes |
| IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) | Yes | Yes | Yes |
| STP Root Guard | Yes | Yes | Yes |
| STP BPDU Guard | Yes | Yes | Yes |
| Edge Port / Port Fast | Yes | Yes | Yes |
| IEEE 802.1Q VLAN Tagging | Yes | Yes | Yes |
| Private VLAN | Yes | Yes | No |
| IEEE 802.3ad Link Aggregation with LACP | Yes | Yes | Yes |
| Unicast/Multicast traffic balance over trunking port (dst-ip, dst-mac, src-dst-ip, src-dst-mac, src-ip, src-mac) | Yes | Yes | Yes |
| IEEE 802.1AX Link Aggregation | Yes | Yes | Yes |
| Spanning Tree Instances (MSTP/CST) | 15/1 | 15/1 | 15/1 |
| IEEE 802.3x Flow Control and Back-pressure | Yes | Yes | Yes |
| IEEE 802.3 10Base-T | Yes | Yes | Yes |
| IEEE 802.3u 100Base-TX | Yes | Yes | Yes |
| IEEE 802.3z 1000Base-SX/LX | Yes | Yes | Yes |
| IEEE 802.3ab 1000Base-T | Yes | Yes | Yes |
| IEEE 802.3ae 10 Gigabit Ethernet | 4xx and 5xx Family | FS-5xx Family | N/A |
| IEEE 802.3 CSMA/CD Access Method and Physical Layer Specifications | Yes | Yes | Yes |
| Storm Control | Yes | Yes | Yes |
| MAC, IP, Ethertype-based VLANs | Yes | Yes | Yes |
| Virtual-Wire | Yes | Yes | No |
| Split Port (QSFP+ breakout to 4xSFP+) | FS-5xx Family | N/A | N/A |
| Time-Domain Reflectcometry (TDR) Support | Yes | Yes | No |
| Layer 3* | |||
| Static Routing (Hardware-based) | Yes | Yes | N/A |
| Routing Entries | 64 on FS-2xx, 4xx Family; 16K on FS-5xx Family | 64 | N/A |
| Host Entries | 4K on FS-2xx, 4xx Family; 24K on FS-5xx Family | 4K | N/A |
| Dynamic Routing Protocols** | OSPFv2, RIPv2, VRRP; BGP, ISIS on FS-5xx |
OSPFv2, RIPv2, VRRP | N/A |
| Multicast Protocols | PIM-SSM on FS-5xx | N/A | N/A |
| ECMP | FS-5xx Family | No | N/A |
| Bidirectional Forwarding Detection (BFD) | Yes | Yes | N/A |
| DHCP Relay | Yes | Yes | N/A |
| Services | |||
| IGMP Snooping | Yes | Yes | No |
| Security and Visibility | |||
| Port Mirroring | Yes | Yes | Yes |
| Admin Authentication Via RFC 2865 RADIUS | Yes | Yes | Yes |
| IEEE 802.1x authentication Port-based | Yes | Yes | Yes |
| IEEE 802.1x Authentication MAC-based | Yes | Yes | Yes |
| IEEE 802.1x Guest and Fallback VLAN | Yes | Yes | Yes |
| IEEE 802.1x MAC Access Bypass (MAB) | Yes | Yes | Yes |
| IEEE 802.1x Dynamic VLAN Assignment | Yes | Yes | Yes |
| Radius CoA (Change of Authority) | Yes | Yes | No |
| Radius Accounting | Yes | Yes | No |
| MAC-IP Binding | 5xx only | No | No |
| sFlow | Yes | Yes | No |
| ACL | 1K entries on FS-5xx Family; 512 on FS-1xx, 2xx, 4xx Families |
512 Entries | No |
| IEEE 802.1ab Link Layer Discovery Protocol (LLDP) | Yes | Yes | Yes |
| IEEE 802.1ab LLDP-MED | Yes | Yes | Yes |
| DHCP-Snooping | Yes | Yes | Yes |
| Dynamic ARP Inspection | Yes | Yes | No |
| Sticky MAC and MAC Limit | Yes (2xx, 4xx and 5xx) | Yes | Yes |
| High Availability | |||
| Multi-Chassis Link Aggregation (MCLAG) | Yes (2xx, 4xx and 5xx) | Yes | N/A |
| Quality of Service | |||
| IEEE 802.1p Based Priority Queuing | Yes (2xx, 4xx and 5xx) | Yes | No |
| IP TOS/DSCP Based Priority Queuing | Yes (2xx, 4xx and 5xx) | Yes | No |
| Management | |||
| IPv4 and IPv6 Management | Yes | Yes | Yes |
| Telnet / SSH | Yes | Yes | Yes |
| HTTP / HTTPS | Yes | Yes | Yes |
| SNMP v1/v2c/v3 | Yes | Yes | Yes |
| SNTP | Yes | Yes | Yes |
| Standard CLI and Web GUI Interface | Yes | Yes | Yes |
| Software download/upload: TFTP/FTP/GUI | Yes | Yes | Yes |
| Managed from FortiGate | Yes | Yes | Yes |
| Support for HTTP REST APIs for Configuration and Monitoring | Yes | Yes | Yes |
| Additional RFC and MIB Support | |||
| RFC 2571 Architecture for Describing SNMP | Yes | Yes | Yes |
| DHCP Client | Yes | Yes | Yes |
| RFC 854 Telnet Server | Yes | Yes | Yes |
| RFC 2865 RADIUS | Yes | Yes | Yes |
| RFC 1643 Ethernet-like Interface MIB | Yes | Yes | Yes |
| RFC 1213 MIB-II | Yes | Yes | Yes |
| RFC 1354 IP Forwarding Table MIB | Yes | Yes | Yes |
| RFC 2572 SNMP Message Processing and Dispatching | Yes | Yes | Yes |
| RFC 1573 SNMP MIB II | Yes | Yes | Yes |
| RFC 1157 SNMPv1/v2c | Yes | Yes | Yes |
| RFC 2030 SNTP | Yes | Yes | Yes |
Specifications:
| FortiSwitch 224D-FPOE | FortiSwitch 224E | FortiSwitch 224E-POE | |
|---|---|---|---|
| Hardware Specifications | |||
| Total Network Interfaces | 24x GE RJ45 ports and 4x GE SFP ports | 24x GE RJ45 ports and 4x GE SFP ports | 24x GE RJ45 ports and 4x GE SFP ports |
| Dedicated Management 10/100 Port | 1 | 1 | 1 |
| RJ-45 Serial Console Port | 1 | 1 | 1 |
| Form Factor | 1 RU Rack Mount | 1 RU Rack Mount | 1 RU Rack Mount |
| Power over Ethernet (PoE) Ports | 24 (802.3af/802.3at) | NA | 12 (802.3af/802.3at) |
| PoE Power Budget | 370 W | NA | 180 W |
| Mean Time Between Failures | > 10 years | > 10 years | > 10 years |
| System Specifications | |||
| Switching Capacity (Duplex) | 56 Gbps | 56 Gbps | 56 Gbps |
| Packets Per Second (Duplex) | 83 Mpps | 83 Mpps | 83 Mpps |
| MAC Address Storage | 16 K | 16 K | 16 K |
| Network Latency | < 1µs | < 1µs | < 1µs |
| VLANs Supported | 4 K | 4 K | 4 K |
| Link Aggregation Group Size | 8 | 8 | 8 |
| Total Link Aggregation Groups | Up to number of ports | Up to number of ports | Up to number of ports |
| Packet Buffers | 1.5 MB | 1.5 MB | 1.5 MB |
| DRAM | 512 MB | 512 MB | 512 MB |
| FLASH | 128 MB | 128 MB | 128 MB |
| Hardware Specifications | |||
| Height x Depth x Width (inches) | 1.73 x 12.2 x 17.5 | 1.73 x 9 x 12.99 | 1.73 x 9 x 12.99 |
| Height x Depth x Width (mm) | 44 x 310 x 440 | 44 x 230 x 330 | 44 x 230 x 330 |
| Weight | 10.64 lbs (4.83 kg) | 4.78 lbs (2.17 kg) | 5.37 lbs (2.44 kg) |
| Hardware Specifications | |||
| Power Required | 100–240V AC, 50–60 Hz | 100–240V AC, 50–60 Hz | 100–240V AC, 50–60 Hz |
| Power Supply | AC Built in | AC Built in | AC Built in |
| Redundant Power | Optional FRPS-740 | Redundant AC | Optional FRPS-740 |
| Power Consumption (Average / Maximum) | 380 W / 397 W | 17.2 W / 17.3 W | 220.18 W / 223.57 W |
| Heat Dissipation | 85 BTU/h | 59.095 BTU/h | 74.29554 BTU/h |
| Operating Temperature | 32–122°F (0–50°C) | 32–122°F (0–50°C) | 32–122°F (0–50°C) |
| Storage Temperature | -4–158°F (-20–70°C) | -4–158°F (-20–70°C) | -4–158°F (-20–70°C) |
| Humidity | 10–90% non-condensing | 10–90% non-condensing | 10–90% non-condensing |
| Certification and Compliance | |||
| FCC, CE, RCM, VCCI, BSMI, UL, CB, RoHS2 | |||
| Warranty | |||
| Fortinet Warranty | Limited lifetime warranty on all models | ||
Reviews
There are no reviews yet.