Fortinet FortiSwitch Models

Fortinet FortiSwitch models: how to choose the right switch

Fortinet FortiSwitch models cover every layer of the network, from the access ports on each desk to the core and datacenter. The right switch depends on how many devices you connect, how much power they need, how fast the uplinks must be and where the switch will sit. Win-Pro supplies, configures and supports FortiSwitch for Singapore businesses, from small offices to campuses and server rooms.

In this guide

1. How FortiSwitch fits into your network
2. Access, aggregation, core and datacenter layers
3. Port counts and copper or fibre uplinks
4. Power over Ethernet (PoE) budgets
5. Managed from FortiGate through FortiLink
6. Planning for growth without overbuying
7. The 100 Series: compact access switches
8. The 200 Series: managed access switches
9. The 400 and 500 Series: campus switching
10. The 600 Series: higher-speed access and aggregation
11. The 1000, 2000 and 3000 Series: core and datacenter
12. FortiSwitch Rugged: harsh environments
13. A sizing checklist before you buy
14. Installation, configuration and support from Win-Pro
15. Related Fortinet products
16. Frequently asked questions

1. How FortiSwitch fits into your network

A switch connects your devices to each other and to the rest of the network. In a Fortinet design, the FortiSwitch joins the FortiGate firewall, the FortiAP wireless access points and your servers. Traffic between these devices is managed centrally, so you can apply the same security policy to a laptop on a desk as you would to a server in a rack.

Start with a simple question: which devices need to connect, and where are they? Count the desks, cameras, phones, printers, access points and servers. Then mark the floor plan. The answers tell you how many ports you need, how many switches to deploy and whether power must reach each device.

2. Access, aggregation, core and datacenter layers

Most business networks are built in layers. The access layer is where end devices plug in, such as workstations, printers and IP cameras. The aggregation layer gathers traffic from several access switches. The core layer moves traffic quickly between buildings or floors. The datacenter layer serves servers and storage.

Small offices often need only one layer, with a single access switch. Multi-floor offices and campuses usually need an access layer on each floor and an aggregation or core switch in the comms room. Matching the switch to the layer keeps costs sensible. A 1000 Series core switch on a desk is wasted money, while a 100 Series access switch in a server room is too small for the load.

3. Port counts and copper or fibre uplinks

Port count is the first specification to check. FortiSwitch models come with 8, 12, 24 and 48 Gigabit Ethernet (GbE) RJ45 ports, and some add 10GbE, 25GbE or 100GbE ports for uplinks. Leave spare ports for growth, usually about 20 percent, so you do not need to replace the switch as soon as a new device arrives.

Uplinks carry traffic from the switch to the rest of the network. Most access switches use small form-factor pluggable (SFP) or SFP+ ports for 1GbE or 10GbE fibre links. Multi-gigabit ports (MGIG) run at 2.5GbE or 5GbE over ordinary copper cable, which suits modern Wi-Fi 6 and Wi-Fi 6E access points. Check the cable type in each room before you choose the uplink, because a link that needs new cabling adds cost and time.

4. Power over Ethernet (PoE) budgets

PoE sends power and data down the same cable. It is ideal for IP phones, wireless access points and cameras, because these devices do not need a separate power socket. The important number is the PoE budget, which is the total power the switch can supply across all its ports.

Add up the power each device draws, then add a margin of at least 20 percent. A switch with a 185 W budget may power 12 devices drawing 10 W each, but it will not power 12 devices drawing 18 W each. Standards also matter. PoE (802.3af) supplies up to 15.4 W per port, PoE+ (802.3at) up to 30 W, and PoE++ (802.3bt) up to 60 W or more. Check that the switch supports the standard your devices need.

5. Managed from FortiGate through FortiLink

FortiSwitch is designed to be managed by a FortiGate firewall. Through FortiLink, the FortiGate discovers the switch, applies VLANs, sets port policies and shows the status of every port in one console. You do not need to log into each switch to make a change.

This simplifies maintenance. A new staff member can be given access to a specific VLAN from one screen. A faulty port can be disabled and the affected device identified quickly. Security policies follow the device, so a guest network stays separate from the finance network even when both share the same switch.

6. Planning for growth without overbuying

Most offices underestimate how many devices they will connect in three years. Plan for the number of ports you will need at the end of that period, not just today. If a switch is full on day one, you will need a second one sooner than you expect. Keep the PoE budget and uplink capacity in mind too, because they are harder to upgrade than the number of ports. Choose a model with spare capacity in each of these three areas, and avoid buying a core-level switch for an access need just to be safe.

A simple test helps here. Ask how the switch would look if you added ten more devices next year. If the answer means buying a second switch, the model is too small. If the answer means only plugging in new cables, the model fits the plan.

7. The 100 Series: compact access switches

The 100 Series is designed for small offices and branch sites. Models range from 8 to 24 ports, with PoE options for phones, cameras and access points. Several 100 Series models include SFP ports for a fibre uplink, which lets a small office run a single cable back to the comms cabinet.

These switches suit shops, clinics, small professional firms and branch offices of larger businesses. Choose a PoE model if you plan to install wireless access points or cameras, since adding PoE later often means replacing the switch.

8. The 200 Series: managed access switches

The 200 Series provides a step up for offices that need more ports and stronger management. Models offer 24 or 48 ports, with PoE+ options and uplinks for 10GbE in some cases. These switches fit well in mid-sized offices and in departments that run many workstations and phones.

Consider this series when you have multiple floors, a growing team or a need for detailed port control, such as separating voice traffic from data traffic.

9. The 400 and 500 Series: campus switching

The 400 and 500 Series is built for campuses, larger offices and buildings with many access points and cameras. Models provide 24 or 48 GbE ports, with 10GbE uplinks and high PoE budgets. Some 500 Series models add 40GbE uplinks for aggregation.

A campus with many floors often uses a 400 or 500 Series switch on each floor, connected to an aggregation switch in the comms room. High PoE budgets are especially useful for wireless access points that need 802.3bt power.

10. The 600 Series: higher-speed access and aggregation

The 600 Series adds faster copper ports, including multi-gigabit (MGIG) connections of 2.5GbE and 5GbE. These models suit sites with modern wireless access points and high-bandwidth devices, and they are designed for businesses that expect demand for speed to grow.

Choose a 600 Series when Wi-Fi 6 or Wi-Fi 6E access points need more than 1GbE per port, or when you plan to run video, design or engineering workloads across the access layer.

11. The 1000, 2000 and 3000 Series: core and datacenter

These are the largest models. The 1000 and 3000 Series serve as core switches, moving traffic between buildings and floors at high speed. The 2000 Series focuses on 25GbE connections for datacenter servers and storage. The series offer many 10GbE, 25GbE and 100GbE ports, with redundant power supplies and fans.

Core and datacenter switches are a larger investment and need careful design. Win-Pro can help map the traffic flows and recommend the right uplink speeds before you buy.

12. FortiSwitch Rugged: harsh environments

FortiSwitch Rugged models are built for places where standard switches fail, such as factories, warehouses, outdoor cabinets and sites with wide temperature swings or dust. They include PoE options and compact designs for DIN-rail mounting.

If your switch will sit on a factory floor, in a utility cabinet or in a loading bay, choose a rugged model rather than a standard one.

13. A sizing checklist before you buy

Use this checklist before you confirm a model.

1. List every device that connects, with its type and power draw.
2. Count the ports needed today, then add about 20 percent for growth.
3. Confirm the PoE budget covers all PoE devices, with a 20 percent margin.
4. Check the uplink type and speed for each switch location.
5. Confirm the switch will be managed by your FortiGate, and that the firmware version supports it.
6. Check the physical space, power supply and cooling in the comms room.
7. Decide whether you need redundant power for critical sites.
8. Ask for a written configuration plan before installation starts.

14. Installation, configuration and support from Win-Pro

Win-Pro supplies the switch, installs it, connects it to your FortiGate through FortiLink and sets up VLANs, PoE policies and port security. We label each port, update the network diagram and hand over a record of every setting.

Support continues after installation. We monitor firmware updates, review port usage and help you plan upgrades as your business grows. To discuss your site, call 6100 2100 or complete our online enquiry form.

15. Related Fortinet products

• Fortinet FortiAP Models
• Fortinet Wired LAN

16. Frequently asked questions