FortiSwitch™ Data Center Series
Secure, Simple, Scalable Ethernet Solution
Overview
FortiSwitch Data Center switches deliver a secure, simple, scalable Ethernet solution with outstanding throughput, resiliency, and scalability. They are designed to meet the demands of modern, bandwidth-intensive environments, including virtualization and cloud computing. These switches offer high-performance 10 GE, 40 GE, or 100 GE capabilities in a compact 1 RU form factor, providing a low total cost of ownership.
Ideal for Top of Rack server or firewall aggregation applications, as well as SD-Branch network core deployments, the FortiSwitch Data Center Series provides a robust and efficient networking platform.
Key Features & Highlights
- High throughput Ethernet switch suitable for Top of Rack or large SD-Branch network deployments.
- 1 GE, 10 GE, or 100 GE access ports, in a compact 1 RU form factor with 40 or 100 GE capable uplinks.
- Uplinks include breakout support for 2x50G, 4x25G, 4x10G, and 4x1G.
- Managed by FortiGate through FortiLink, enabling the Fortinet Security Fabric.
- Stackable up to 300 switches per FortiGate, depending on the model.
- Dual hot-swappable power supplies for redundancy.
- Supports wire-speed switching with both store-and-forward and cut-through forwarding modes.
Security Fabric Integration Through FortiLink
The FortiSwitch Data Center Series integrates seamlessly with FortiGate management via FortiLink, extending the Fortinet Security Fabric to the Ethernet port level. This integration allows for the application of the same policies configured and applied to FortiGate interfaces to the FortiSwitch Ethernet ports, simplifying management and reducing costs. Centralized policy management, including role-based access and control, is easily implemented, allowing users or devices to be authenticated against the same database with consistent security policy application, regardless of connection point.
Deployment Options
FortiLink Mode
FortiLink is a proprietary management protocol that enables FortiGate security appliances to seamlessly manage any FortiSwitch. This mode integrates FortiSwitch as a logical extension of the FortiGate, embedding it directly into the Fortinet Security Fabric. This approach reduces complexity and management costs by consolidating network security and access layer functions under a single console. The diagram illustrates servers and storage connected to FortiSwitch Data Center Switches, which are then connected to a FortiGate HA Pair via FortiLink.
Standalone Mode
FortiSwitch units can also be managed independently using their native GUI and CLI interfaces. Additional configuration and management options are available through RESTful APIs. The diagram shows servers and storage connected to FortiSwitch Data Center Switches, which can operate in a standalone configuration.
Hardware Overview
The FortiSwitch Data Center Series includes several models, each with specific port configurations:
- FortiSwitch 1024D: Features 24x GE/10 GE SFP/SFP+ ports and dual AC power supplies.
- FortiSwitch 1048E: Features 48x GE/10 GE SFP/SFP+ ports and 6x 40 GE QSFP+ or 4x 100 GE QSFP28 ports, along with dual AC power supplies.
- FortiSwitch 3032E: Features 32x 100 GE QSFP28 ports and dual AC power supplies.
Detailed front and back views of the FortiSwitch 1024D, 1048E, and 3032E models are provided, illustrating port layouts, power supplies, and management interfaces.
Features Comparison
The following tables detail the features supported by the FortiSwitch 1024D, 1048E, and 3032E models, categorized by Layer 2, Layer 3, Security, and Management functionalities.
Layer 2 Features
| Feature | FortiSwitch 1024D | FortiSwitch 1048E | FortiSwitch 3032E |
|---|---|---|---|
| Auto-Negotiation for Port Speed and Duplex | Yes | Yes | Yes |
| Auto Topology | Yes | Yes | Yes |
| Edge Port / Port Fast | Yes | Yes | Yes |
| IEEE 802.1ad QnQ | Yes | Yes | Yes |
| IEEE 802.1AX Link Aggregation | Yes | Yes | Yes |
| IEEE 802.1D MAC Bridging/STP | Yes | Yes | Yes |
| IEEE 802.1Q VLAN Tagging | Yes | Yes | Yes |
| IEEE 802.1Qbb Priority-based Flow Control | Yes | Yes | Yes |
| IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) | Yes | Yes | Yes |
| IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) | Yes | Yes | Yes |
| IEEE 802.3 CSMA/CD Access Method and Physical Layer Specifications | Yes | Yes | Yes |
| IEEE 802.3ab 1000Base-T | Yes | Yes | Yes |
| IEEE 802.3ad Link Aggregation with LACP | Yes | Yes | Yes |
| IEEE 802.3ae 10 Gigabit Ethernet | Yes | Yes | Yes |
| IEEE 802.3ba, 802.3bj, 802.3bm 40 and 100 Gigabit Ethernet | No | Yes | Yes |
| IEEE 802.3u 100Base-TX | Yes | No | Yes |
| IEEE 802.3x Flow Control and Back-pressure | Yes | Yes | Yes |
| IEEE 802.3z 1000Base-SX/LX | Yes | Yes | Yes |
| Ingress Pause Metering | Yes | Yes | No |
| Jumbo Frames | Yes | Yes | Yes |
| LAG Min/Max Bundle | Yes | Yes | Yes |
| Loop Guard | Yes | Yes | Yes |
| MAC, IP, Ethertype-based VLANs | Yes | Yes | Yes |
| PHY Forward Error Correction | No | Yes | Yes |
| Private VLAN | Yes | Yes | Yes |
| Rapid PVST Interoperation | Yes | Yes | Yes |
| Spanning Tree Instances (MSTP/CST) | 32/1 | 32/1 | 32/1 |
| Split Port | No | Yes | Yes |
| Storm Control | Yes | Yes | Yes |
| STP BPDU Guard | Yes | Yes | Yes |
| STP Root Guard | Yes | Yes | Yes |
| Unicast/Multicast traffic balance over trunking port | Yes | Yes | Yes |
| Virtual-Wire | Yes | Yes | Yes |
| VLAN Mapping | Yes | Yes | Yes |
Layer 3 Features
| Feature | FortiSwitch 1024D | FortiSwitch 1048E | FortiSwitch 3032E |
|---|---|---|---|
| Bidirectional Forwarding Detection (BFD) | Yes | Yes | Yes |
| DHCP Relay | Yes | Yes | Yes |
| DHCP Server | Yes | Yes | Yes |
| Dynamic Routing Protocols* | OSPFv2, RIPv2, VRRP, BGP, ISIS | OSPFv2, RIPv2, VRRP, BGP, ISIS | OSPFv2, RIPv2, VRRP, BGP, ISIS |
| ECMP | Yes | Yes | Yes |
| Filtering Routemaps based on routing protocol | Yes | Yes | Yes |
| IGMP Proxy / Querier | Yes | Yes | Yes |
| IGMP Snooping | Yes | Yes | Yes |
| IP Conflict Detection and Notification | Yes | Yes | Yes |
| IPv6 Route Filtering | Yes | Yes | Yes |
| L3 Host Entries | 16K | 32K | 32K |
| MLD Proxy / Querier | Yes | Yes | Yes |
| MLD Snooping | Yes | Yes | Yes |
| Multicast Protocols* | PIM-SSM | PIM-SSM | PIM-SSM |
| Routing Entries | 16K | 16K | 8K |
| Static Routing (Hardware-based) | Yes | Yes | Yes |
| Unicast Reverse Path Forwarding (uRPF) | Yes | Yes | Yes |
| VRF | Yes | Yes | Yes |
Security and Visibility Features
| Feature | FortiSwitch 1024D | FortiSwitch 1048E | FortiSwitch 3032E |
|---|---|---|---|
| ACL | Yes, 2K entries | Yes, 8K entries | Yes, 6K entries |
| ACL Multiple Ingress | Yes | Yes | Yes |
| ACL Multistage | Yes | Yes | Yes |
| ACL Schedule | Yes | Yes | Yes |
| Admin Authentication Via RFC 2865 RADIUS | Yes | Yes | Yes |
| Assign VLANs via Radius attributes (RFC 4675) | Yes | Yes | Yes |
| DHCP-Snooping | Yes | Yes | Yes |
| Dynamic ARP Inspection | Yes | Yes | Yes |
| FIPS 140-2 (level 2) support | No | Yes | Yes |
| Flow Export (NetFlow and IPFIX) | Yes | Yes | Yes |
| IEEE 802.1ab Link Layer Discovery Protocol (LLDP) | Yes | Yes | Yes |
| IEEE 802.1ab LLDP-MED | Yes | Yes | Yes |
| IEEE 802.1X Authentication MAC-based | Yes | Yes | Yes |
| IEEE 802.1X Authentication Port-based | Yes | Yes | Yes |
| IEEE 802.1X Dynamic VLAN Assignment | Yes | Yes | Yes |
| IEEE 802.1X EAP Pass-Through | Yes | Yes | Yes |
| IEEE 802.1X Guest and Fallback VLAN | Yes | Yes | Yes |
| IEEE 802.1X MAC Access Bypass (MAB) | Yes | Yes | Yes |
| IEEE 802.1X Open Auth | Yes | Yes | Yes |
| IP Source Guard | Yes | Yes | Yes |
| IPv6 RA Guard | Yes | Yes | Yes |
| LLDP-MED ELIN support | Yes | Yes | Yes |
| MAC-IP Binding | Yes | Yes | Yes |
| Port Mirroring | Yes | Yes | Yes |
| RADIUS Accounting | Yes | Yes | Yes |
| RADIUS COA | Yes | Yes | Yes |
| sFlow | Yes | Yes | Yes |
| Sticky MAC | Yes | Yes | Yes |
Management Features
| Feature | FortiSwitch 1024D | FortiSwitch 1048E | FortiSwitch 3032E |
|---|---|---|---|
| Auto Discovery of Multiple Switches | Yes | Yes | Yes |
| Automated Detection and Recommendations | Yes | Yes | Yes |
| Centralized VLAN Configuration | Yes | Yes | Yes |
| Dynamic Port Profiles for FortiSwitch ports | Yes | Yes | Yes |
| FortiLink Stacking (Auto Inter-Switch Links) | Yes | Yes | Yes |
| IGMP Snooping | Yes | Yes | Yes |
| L3 Routing and Services | Yes (FortiGate) | Yes (FortiGate) | Yes (FortiGate) |
| Link Aggregation Configuration | Yes | Yes | Yes |
| LLDP/MED | Yes | Yes | Yes |
| Number of Managed Switches per FortiGate | 8 to 300 (Refer to admin-guide) | 8 to 300 (Refer to admin-guide) | 8 to 300 (Refer to admin-guide) |
| Policy-Based Routing | Yes (FortiGate) | Yes (FortiGate) | Yes (FortiGate) |
| Provision firmware upon authorization | Yes | Yes | Yes |
| Software Upgrade of Switches | Yes | Yes | Yes |
| Spanning Tree | Yes | Yes | Yes |
| Switch POE Control | Yes | Yes | Yes |
| Virtual Domain | Yes | Yes | Yes |
| 802.1X Authentication (Port-based, MAC-Based, MAB) | Yes | Yes | Yes |
| Block Intra-VLAN Traffic | Yes | Yes | Yes |
| Device Detection | Yes | Yes | Yes |
| DHCP Snooping | Yes | Yes | Yes |
| FortiGuard IoT identification | Yes | Yes | Yes |
| FortiSwitch recommendations in Security Rating | Yes | Yes | Yes |
| Host Quarantine on Switch Port | Yes | Yes | Yes |
| Integrated FortiGate Network Access Control (NAC) function | Yes (FortiGate) | Yes (FortiGate) | Yes (FortiGate) |
| MAC Black/While Listing | Yes | Yes | Yes |
| Network Device Detection | Yes | Yes | Yes |
| Policy Control of Users and Devices | Yes (FortiGate) | Yes (FortiGate) | Yes (FortiGate) |
| Switch Controller traffic collector | Yes | Yes | Yes |
| Syslog Collection | Yes | Yes | Yes |
| UTM Features | Firewall, IPC, AV, Application Control, Botnet (via FortiGate) | Firewall, IPC, AV, Application Control, Botnet (via FortiGate) | Firewall, IPC, AV, Application Control, Botnet (via FortiGate) |
| Quality for Service Egress Priority Tagging | Yes | Yes | Yes |
| Quality for Service Explicit Congestion Notification | Yes | Yes | Yes |
| High Availability | |||
| Active-Active Split LAG from FortiGate to FortiSwitches for Advanced Redundancy | Yes | Yes | Yes |
| LAG Support for FortiLink Connection | Yes | Yes | Yes |
| Support FortiLink FortiGate in HA Cluster | Yes | Yes | Yes |
Services
| Feature | FortiSwitch 1024D | FortiSwitch 1048E | FortiSwitch 3032E |
|---|---|---|---|
| IEEE 1588 PTP (Transparent Clock) | No | Yes | Yes |
Specifications
FortiSwitch 1024D
- Hardware Specifications: 24x GE/10 GE SFP/SFP+ ports, 1x RJ-45 Serial Console Port, 1 RU Rack Mount.
- System Specifications: Switching Capacity: 480 Gbps (Duplex), Packets Per Second: 714 Mpps (64 bytes), MAC Address Storage: 128 K, Network Latency: < 800ns, VLANs Supported: 4 K, IPv4/IPv6 Routing: Yes, Link Aggregation Group Size: Up to 48, Total Link Aggregation Groups: 8, Queues/Port: 8, Packet Buffers: 9 MB, DRAM: 2 GB, NAND: 128 MB.
- Dimensions: Height x Depth x Width (inches): 1.71 x 18.11 x 17.26, Height x Depth x Width (mm): 43.5 x 460 x 438.5, Weight: 17.62 lbs (8 kg).
- Environment: Power Required: 100-240V AC, 50-60 Hz, Power Consumption (Maximum): up to 140 W, Power Supply: Dual hot swappable AC, Heat Dissipation: 369.87 BTU/h, Operating Temperature: 32-104°F (0-40°C), Storage Temperature: -13-158°F (-25-70°C), Humidity: 10-90% RH non-condensing, Air Flow: Front to back, Mean Time Between Failures: > 10 years.
- Certification and Compliance: FCC, CE, RCM, VCCI, BSMI, UL, CB, RoHS2.
- Warranty: Limited lifetime warranty on all models.
FortiSwitch 1048E
- Hardware Specifications: 48x GE/10 GE SFP/SFP+ ports and 6x 40 GE QSFP+ ports or 4x 100 GE QSFP28 ports, 1x RJ-45 Serial Console Port, 1 RU Rack Mount.
- System Specifications: Switching Capacity: 1760 Gbps (Duplex), Packets Per Second: 1518 Mpps (64 bytes), MAC Address Storage: 144 K, Network Latency: < 800ns, VLANs Supported: 4 K, IPv4/IPv6 Routing: Yes, Link Aggregation Group Size: Up to number of ports, Total Link Aggregation Groups: 8, Queues/Port: 8, Packet Buffers: 12 MB, DRAM: 8 GB, NAND: 128 MB.
- Dimensions: Height x Depth x Width (inches): 1.69 x 18.11 x 17.26, Height x Depth x Width (mm): 43 x 460 x 438.5, Weight: 18.96 lbs (8.6 kg).
- Environment: Power Required: 100-240V AC, 50-60 Hz, Power Consumption (Maximum): up to 181.7 W, Power Supply: Dual hot swappable AC, Heat Dissipation: 620.4 BTU/h, Operating Temperature: 32-113°F (0-45°C), Storage Temperature: -4-158°F (-20-70°C), Humidity: 10-90% RH non-condensing, Air Flow: Front to back, Mean Time Between Failures: > 10 years.
- Certification and Compliance: FCC, CE, RCM, VCCI, BSMI, UL, CB, RoHS2.
- Warranty: Limited lifetime warranty on all models.
FortiSwitch 3032E
- Hardware Specifications: 32x 40 GE/100 GE QSFP+ / QSFP28 ports, 1x RJ-45 Serial Console Port, 1 RU Rack Mount.
- System Specifications: Switching Capacity: 6400 Gbps (Duplex), Packets Per Second: 5952 Mpps (64 bytes), MAC Address Storage: 72 K, Network Latency: < 1 us, VLANs Supported: 4 K, IPv4/IPv6 Routing: Yes, Link Aggregation Group Size: Up to number of ports, Total Link Aggregation Groups: 8, Queues/Port: 8, Packet Buffers: 16 MB, DRAM: 8 GB, NAND: 128 MB.
- Dimensions: Height x Depth x Width (inches): 1.69 x 18.11 x 17.26, Height x Depth x Width (mm): 43 x 460 x 438.5, Weight: 19.34 lbs (8.77 kg).
- Environment: Power Required: 100-240V AC, 50-60 Hz, Power Consumption (Maximum): up to 463.8 W, Power Supply: Dual hot swappable AC, Heat Dissipation: 1582.5 BTU/h, Operating Temperature: 32-104°F (0-40°C), Storage Temperature: -4-158°F (-20-70°C), Humidity: 10-90% RH non-condensing, Air Flow: Front to back, Mean Time Between Failures: > 10 years.
- Certification and Compliance: FCC, CE, RCM, VCCI, BSMI, UL, CB, RoHS2.
- Warranty: Limited lifetime warranty on all models.
Order Information
| Product | SKU | Description |
|---|---|---|
| FortiSwitch 1024D | FS-1024D | Layer 2/3 FortiGate switch controller compatible switch with 24x GE/10 GE SFP/SFP+ slots. Dual AC power supplies. |
| FortiSwitch 1048E | FS-1048E | Layer 2/3 FortiGate switch controller compatible switch with 48x GE/10 GE SFP/SFP+ slots and 6x 40 GE QSFP+ or 4x 100 GE QSFP28. Dual AC power supplies. |
| FortiSwitch-3032E | FS-3032E | Layer 2/3 FortiGate switch controller compatible switch with 32x 100 GE QSFP28, Dual AC power supplies. |
| FortiSwitch Cloud Management License* | FC-10-WMSC1-190-02-DD | FortiSwitch Cloud Management License subscription 1 Year Contract. |
| FortiGate Cloud Management* | FC-10-0030E-131-02-DD | FortiGate Cloud Management, Analysis and 1 Year Log Retention. |
| Accessories: FortiSwitch Advanced Features License | FS-SW-LIC-1000 (for FS-1000 Series) FS-SW-LIC-3000 (for FS-3000 Series) |
SW License for FS-1000/3000 Series Switches to activate Advanced Features. |
| AC Power Supply | FS-PSU-460 (for FS-1048E/1024D) FS-PSU-800 (for FS-3032E) |
Spare AC power supply. |
* When managing a FortiSwitch with a FortiGate via FortiGate Cloud, no additional license is necessary.
For details of Transceiver modules, see the Fortinet Transceivers datasheet.
RFC Compliance
The FortiSwitch Data Center Series supports a comprehensive range of RFC and MIB standards for network interoperability and management. Key areas include BFD, BGP, DHCP, IP/IPv4, IP Multicast, IPv6, IS-IS, OSPF, RADIUS, RIP, and SNMP.
RFC and MIB Support Highlights:
- BFD: RFC 5880, RFC 5881, RFC 5882.
- BGP: RFC 1771, RFC 1965, RFC 1997, RFC 2545, RFC 2796, RFC 2842, RFC 2858, RFC 4271, RFC 6286, RFC 6608, RFC 6793, RFC 7606, RFC 7607, RFC 7705, RFC 8212, RFC 8654.
- DHCP: RFC 2131, RFC 3046, RFC 7513.
- IP/IPv4: RFC 2697, RFC 3168, RFC 5227, RFC 5517, RFC 7039.
- IP Multicast: RFC 2362, RFC 2710, RFC 4541, RFC 4605, RFC 4607.
- IPv6: RFC 2464, RFC 2474, RFC 2893, RFC 4213, RFC 4291, RFC 4443, RFC 4861, RFC 4862, RFC 5095, RFC 6724, RFC 7113, RFC 8200, RFC 8201.
- IS-IS: RFC 1195, RFC 5308.
- MIB: RFC 1213, RFC 1354, RFC 1493, RFC 1573, RFC 1643, RFC 1724, RFC 1850, RFC 2233, RFC 2618, RFC 2620, RFC 2674, RFC 2787, RFC 2819, RFC 2863, RFC 2932, RFC 2934, RFC 3289, RFC 3433, RFC 3621, RFC 6933.
- OSPF: RFC 1583, RFC 1765, RFC 2328, RFC 2370, RFC 2740, RFC 3101, RFC 3137, RFC 3623, RFC 5340, RFC 5709, RFC 6549, RFC 6845, RFC 6860, RFC 7474, RFC 7503, RFC 8042, RFC 8362.
- Other: RFC 2030 (SNTP), RFC 3176 (sFlow), RFC 3768 (VRRP), RFC 3954 (NetFlow v9), RFC 5101 (IPFIX), RFC 5798 (VRRPv3).
- RADIUS: RFC 2865, RFC 2866, RFC 4675, RFC 5176.
- RIP: RFC 1058, RFC 2080, RFC 2082, RFC 2453, RFC 4822.
- SNMP: RFC 1157, RFC 2571, RFC 2572, RFC 2573, RFC 2576.
* RFC and MIB support is dependent on the FortiSwitch Operating System. Please refer to the feature matrix in the administration guide for model-specific support.
