FortiSwitchOS 7.4.2 Release Notes

Introduction

This document provides the following information for FortiSwitchOS 7.4.2 build 0801:

• Supported models on page 5
• Special notices on page 7
• Upgrade information on page 9
• Product integration and support on page 10
• Resolved issues on page 11
• Known issues on page 13

See the Fortinet Document Library for FortiSwitchOS documentation.

Supported models

FortiSwitchOS 7.4.2 supports the following models:

What's new in FortiSwitchOS 7.4.2

Release 7.4.2 provides the following new features:

• You can now bind 240 MAC addresses to VLANs for the FS-624F and FS-624F-FPOE models. You can now bind 480 MAC addresses to VLANs for the FS-648F and FS-648F-FPOE models.
• The FS-424E, FS-424E-POE, FS-424E-FPOE, FS-424E-Fiber, FSR-424F-POE, FS-M426E-FPOE, FS-448E, FS-448E-FPOE, and FS-448E-POE models now support equal cost multi-path (ECMP) routing.
• The FS-2048F model now supports Virtual Extensible LAN (VXLAN) interfaces.
• You can now split ports 25 and 26 of the FS-T1024E and FS-1024E models into four subports of 10G (as well as 25G).
• The link monitor configuration in the GUI and CLI has changed:
  • You must now set the server IP address when you create a link monitor. This option supports remote peer monitoring.
  • Ping is now the default protocol when using IPv4 addresses, instead of Address Resolution Protocol (ARP).
  • The gateway IP address (IPv4 and IPv6) is no longer mandatory.
• You can now assign a priority to each VLAN. If there is more than one VLAN with the same name (specified in the set description command), FortiSwitchOS selects the VLAN with the lowest assignment-priority value (which is the highest priority) of the VLANs with names (specified in the set description command) that match the value of the RADIUS Tunnel-Private-Group-Id or Egress-VLAN-Name attribute. The assignment-priority value can be 1-255. By default, the assignment-priority is 128. The lowest assignment-priority value gets the highest priority.
• The time zone is now reported in the FortiSwitchOS local log and syslog entries.
• You can use the new Router > Config > Key Chains page to create, edit, or delete key chains in the GUI. Key chains are used for MD5 authentication for Routing Information Protocol (RIP) or Intermediate System to Intermediate System Protocol (IS-IS) routing.
• The FS-624F, FS-624F-FPOE, FS-648F, and FS-648F-FPOE models now support multichassis link aggregation groups (MCLAGs).

Refer to the FortiSwitch feature matrix for details about the features supported by each FortiSwitch model.

Special notices

Zero-touch management

When a new FortiSwitch unit is started, by default, it will connect to the available manager, which can be a FortiGate device, FortiLAN Cloud, or FortiSwitch Manager. All ports are enabled for auto discovery. The "internal" interface is the DHCP client in all FortiSwitch models. If you do not want your FortiSwitch unit to be managed, you must disable the features that you do not want active.

By default, auto-network is enabled in FortiSwitchOS 7.2.0 and later

After an execute factoryreset command is executed on a FortiSwitch unit in standalone mode, the auto-network configuration is enabled by default. If you are not using auto-network, you must manually disable it:

config switch auto-network
set status disable
end

Downgrading FortiSwitchOS 7.0.0 and later to versions earlier than 6.2.6 or 6.4.4 is not supported

Downgrading FortiSwitchOS 7.0.0 and later to FortiSwitchOS 6.2.6 and later 6.2 versions is supported. Downgrading FortiSwitchOS 7.0.0 and later to FortiSwitchOS 6.4.4 and later 6.4 versions is supported. Downgrading FortiSwitchOS 7.0.0 to versions earlier than FortiSwitchOS 6.2.6 or 6.4.4 is not supported.

Downgrading your FortiSwitchOS version requires converting the admin password format first

Before downgrading to a FortiSwitchOS version earlier than 7.0.0, you need to ensure that the administrator password is in SHA1 format. Use the execute system admin account-convert-sha1 <admin_name> command to convert the administrator password to SHA1 encryption.

Before downgrading to FortiSwitchOS 7.0.0 or later, you need to ensure that the administrator password is in SHA1 or SHA256 format.

• Use the execute system admin account-convert-sha1 <admin_name> command to convert the administrator password to SHA1 encryption.
• Use the execute system admin account-convert-sha256 <admin_name> command to convert the password for a system administrator account to SHA256 encryption.

Important: If you do not convert the admin password before downgrading, the admin password will not work after the switch reboots with the earlier FortiSwitchOS version. ⚠️

To convert the format of the admin password to SHA1 format:

1. Enter the following CLI command to convert the admin password to SHA1 encryption:
   execute system admin account-convert-sha1 <admin_name>
2. Downgrade your firmware.

To convert the format of the admin password to SHA256 format:

1. Enter the following CLI command to convert the admin password to SHA256 encryption:
   execute system admin account-convert-sha256 <admin_name>
2. Downgrade your firmware.

Connecting multiple FSR-112D-POE switches

The FSR-112D-POE switch does not support interconnectivity to other FSR-112D-POE switches using the PoE ports. Fortinet recommends using the SFP ports to interconnect switches.

Upgrade information

FortiSwitchOS 7.4.2 supports upgrading from FortiSwitchOS 3.5.0 and later.

For the FS-424E, FS-424E-POE, FS-424E-FPOE, FS-424E-Fiber, and FS-M426-FPOE models, there is a two-step upgrade process if you are upgrading from FortiSwitchOS 6.0.x or 6.2.x to 7.2.x:

1. Upgrade from FortiSwitchOS 6.0.x or 6.2.x to FortiSwitchOS 6.4.12 or later.
2. Upgrade from FortiSwitchOS 6.4.12 or later to 7.2.x.

? If you do not follow the two-step upgrade process, the FortiSwitch unit will not start after the upgrade, and you will need to use the serial console to conclude the upgrade (BIOS and OS).

For FortiSwitch units managed by FortiGate units, refer to the FortiLink Release Notes for upgrade information.

Product integration and support

FortiSwitchOS 7.4.2 support

The following table lists FortiSwitchOS 7.4.2 product integration and support information.

Resolved issues

The following issues have been fixed in FortiSwitchOS 7.4.2. For inquiries about a particular bug, please contact Customer Service & Support.

Known issues

The following known issues have been identified with FortiSwitchOS 7.4.2. For inquiries about a particular bug or to report a bug, please contact Fortinet Customer Service & Support.