FortiGate, FortiSwitch and FortiAP LAN Edge
FortiLink can make FortiSwitch and FortiAP extensions of FortiGate management. The convenience is strongest when topology, security policy, failure domains and upgrade compatibility are designed together.
Treat security and access as one engineered edge
Model FortiGate capacity, FortiLink topology, switch ports, PoE, AP load, VLANs, NAC, routing, high availability and management responsibility.
FortiGate capacity and policy foundation
Select FortiGate from enabled-security throughput, interface speeds, VPN, SD-WAN, session load, users, FortiSwitch and FortiAP scale and high-availability requirements. Subscription features can affect both capability and performance. Confirm current datasheets and architecture limits.
Define zones, VLANs, routing, DHCP, DNS, firewall policy, security profiles, logging and administrative access. Establish WAN underlays and failover before adding LAN automation. High availability needs synchronized configuration, heartbeat design, matching interfaces and tested upstream and downstream behavior.
- Throughput with intended security services
- Interfaces, sessions, VPN and managed-device scale
- Zones, VLANs, routing and policy model
- HA, WAN and logging architecture
FortiLink and switching topology
FortiLink-managed switches can be authorized and configured through FortiGate. Decide whether the topology uses direct links, switch tiers, multi-chassis link aggregation or other supported designs. Confirm model and FortiOS/FortiSwitchOS compatibility before installation.
Size access and distribution switches for port speed, PoE, uplinks, optics and redundancy. Create device and port profiles for APs, phones, users, cameras and building systems. Document native and tagged VLAN behavior and avoid changing production FortiLink topology without a recovery plan.
- Supported FortiLink topology
- FortiGate, FortiSwitch and software compatibility
- Ports, PoE, uplinks and optics
- VLAN and port-profile standards
| Component | Role | Critical dependency |
|---|---|---|
| FortiGate | Security, routing and management | Capacity, subscriptions and HA |
| FortiSwitch | Wired access and aggregation | FortiLink topology and compatibility |
| FortiAP | Wireless access | RF, PoE, controller and policy |
| FortiLink | Integrated management path | Links, VLANs and supported software |
FortiAP wireless and segmentation
FortiAP models span Wi-Fi generations and indoor, outdoor and wall-jack form factors. Select from survey results, bands, client density, antenna pattern, mounting, environment, PoE and uplink speed. Model controller capacity and traffic forwarding mode.
Configure SSIDs, authentication, certificates, guest access, VLANs and security policy as one workflow. NAC and dynamic segmentation require endpoint classification and exception planning. Validate roaming, voice, application throughput and failure behavior after installation.
- RF survey, AP and antenna selection
- Controller scale and data forwarding mode
- SSID, identity, NAC and VLAN policy
- Roaming and application validation
Lifecycle, backups and acceptance
Fortinet products have interdependent compatibility and upgrade paths. Use official matrices and release notes, back up configuration, stage changes and verify FortiLink, switches, APs, VPNs and policies afterward. Avoid ad hoc upgrades from unofficial files.
Acceptance should test Internet, routing, segmentation, wired ports, PoE, Wi-Fi, VPN, HA, WAN failover, logging and alerts. Deliver diagrams, licenses, subscriptions, inventory, backups and a recovery sequence protected from public access.
- Compatibility and supported upgrade path
- Configuration backup and rollback
- Security, network and failure test matrix
- Protected inventory and recovery documentation
How we plan and deliver the work
The final design depends on site conditions, existing systems, client policies and the selected manufacturer or platform.
Architect security
Define FortiGate scale, WAN, VLANs, policy and HA.
Design LAN edge
Select switches, FortiLink topology, APs, PoE and uplinks.
Stage and deploy
Back up, authorize, configure and install through change control.
Validate and transfer
Test services, segmentation, failover and recovery and deliver records.
Information to gather before design
Good decisions are easier when the project team starts with complete operational and technical information. The following items help reduce assumptions, change orders and avoidable return visits.
- FortiGate services, throughput and subscriptions
- FortiLink topology and switch compatibility
- Ports, PoE, uplinks and optics
- Wireless, identity and segmentation policy
- Upgrade, backup and acceptance requirements
Frequently asked questions
These are common planning questions. A site-specific answer should be confirmed during discovery and design.
Can FortiSwitch operate without FortiGate?
Supported FortiSwitch models can operate standalone or through other supported management, but architecture and features differ.
Does FortiLink remove the need to design VLANs?
No. It centralizes management, while VLAN, routing, security and failure behavior still require design.
Can any FortiAP run with any FortiGate?
Compatibility, controller capacity and software versions must be checked for the exact models.
Where should updates be obtained?
Use Fortinet’s official documentation and support channels with a supported upgrade path.
Manufacturer software, firmware and technical files remain on the manufacturer’s official website. We do not mirror firmware files locally.
Plan a testable network-infrastructure project
Share available drawings, site counts, pathways, distances, applications and turnover requirements. We will help identify the surveys, materials, testing and documentation the project needs.