Fortinet Version 3.2.0 Manual

A SERVICE OF

next previous

Layer 2 Interfaces

The loop guard feature is designed to work in concert with STP rather than as a replacement for STP. Each port

that has loop guard enabled will periodically broadcast Loop Guard Data Packets (LGDP) packets to its network.

If a broadcast packet sent out on a port is subsequently received by the same port, a loop exists downstream.

The system takes the port out of service. The port returns to service after a configured timeout duration. If the

timeout value is zero, you must manually reset the port.

By default, Loop Guard is disabled on all ports, and the timeout is set to Zero.

Configuring Loop Guard

Using the CLI:

config switch interface

edit port <number>

set loop-guard <enabled|disabled>

set loop-guard-timeout <integer>

Use the following command to reset a port that detected a loop:

execute loop-guard reset <port>

Viewing Loop Guard Configuration

Display the Loop Guard configuration for a port using following command:

config switch interface <port>

show

31

FortiSwitchOS-3.2.0