By Manny Fernandez

September 8, 2026

LLDP on FortiSwitch Managed by FortiLink

Here is a quick article on running lldp on your FortiSwitch.  Customer had an issue today where they could not find the IP addresses of some HP switches he had attached t0 a FortiSwitch port.

config switch-controller managed-switch
  edit "<FortiSwitch-Serial-Number>"
     config ports
        edit "port1"
           set lldp-status rx-tx
        next
     end
   next
end

 

The available options for lldp-status are:

  • rx-tx: Transmit and receive LLDP frames (default on standard user/ISL ports).

  • rx-only: Only listen for LLDP neighbors.

  • tx-only: Only broadcast local chassis and port TLVs.

  • disable: Completely disable LLDP processing on the interface.

Once you have lldp configured on the port, you can use the following command to see the connected lldp devices.

 

diagnose switch-controller switch-info lldp neighbors-summary <FortiSwitch-Serial-Number>
diagnose switch-controller switch-info lldp neighbors-detail <FortiSwitch-Serial-Number> <port_name>

For this customer, we needed the IP address so we used the neighbor-detail command.  Below is the output.

Neighbor learned on port port5 by LLDP protocol
Last change 631185 seconds ago
Last packet received 6 seconds ago

Chassis ID: 38:21:37:e2:33:40 (mac)
System Name: REM-PHX-SW003
System Description:
HP J9772A 2530-48G-PoEP Switch, revision YA.16.11.0030, ROM YA.15.20 (/ws/swbuildm/rel_beluru_qaoff/code/build/lakes(swbuildm_rel_beluru_qaoff_rel_beluru
))

Time To Live: 120 seconds
System Capabilities: B
Enabled Capabilities: B
Management IP Address: 10.1.100.13
Management IP Interface Subtype: unknown, Index: 0

Port ID: 48 (local)
Port description: 48
IEEE802.1, Port VLAN ID: 1
IEEE802.3, MAC/PHY Configuration/Status:
Autoneg support: Supported
Autoneg enabled: Enabled
Autoneg advertised: 0x6c01
1000BASE-T(full duplex mode)
100BASE-T(full duplex mode)
100BASE-T(half duplex mode)
10BASE-T(full duplex mode)
10BASE-T(half duplex mode)
MAU type: 1000BASETFD - Four-pair Category 5 UTP, full duplex mode
IEEE802.3, Power via MDI:
Power devicetype: PSE
PSE MDI Power: Supported
PSE MDI Power Enabled: Yes
PSE Pair Selection: Can not be controlled
PSE power pairs: Signal
Power class: 1 (class-0)
Power type: 802.3at off
Power source: Unknown
Power priority: Unknown
Power requested: 0.0W
Power allocated: 0.0W
Organizationally Specific TLV:
OUI: 00:16:b9
Subtype: 2
Info: (2 bytes)
[..] 0001

With the neighbor-summary command, you get a more condensed version of the output.

diagnose switch-controller switch-info lldp neighbors-summary REM-PHX--SW000
Vdom: root
Managed Switch : ATC-REM-PHX--SW

Capability codes:
R:Router, B:Bridge, T:Telephone, C:DOCSIS Cable Device
W:WLAN Access Point, P:Repeater, S:Station, O:Other
MED type codes:
Generic:Generic Endpoint (Class 1), Media:Media Endpoint (Class 2)
Comms:Communications Endpoint (Class 3), Network:Network Connectivity Device

Portname Status Device-name TTL Capability MED-type Port-ID
__________ _______ __________________________ ____ __________ ________ _______
port1 Up PHX-RT01 120 BR Network a
port2 Up PHX-RT01 120 BR Network b
port3 Down - - - - -
port4 Down - - - - -
port5 Up PHX-SW003 120 B - 48
port6 Up PHX-SW002 120 B - 24
port7 Down - - - - -
port8 Up PHX-SW001 120 B - 48
port9 Down - - - - -
port10 Down - - - - -
port11 Down - - - - -
port12 Down - - - - -
port13 Down - - - - -
port14 Down - - - - -

Recent posts

  • If you've spent any time configuring user authentication on... Full Story

  • DNS is one of those technologies that quietly underpins... Full Story

  • BGP issues on FortiGate firewalls usually trace back to... Full Story

  • Every time your laptop talks to your router, a... Full Story

  • If you've spent any time configuring NAT on a... Full Story

  • If you have spent any time configuring firewall policies... Full Story

  • High availability on FortiGate is one of those features... Full Story

  • If you've configured SD-WAN on a FortiGate, you've almost... Full Story

  • FortiLink is the management protocol that turns a FortiSwitch... Full Story

  • FortiSwitches are pretty rock solid from Mean Time Between... Full Story

  • This is a quicky tip.  Have you ever gone... Full Story

  • DNS is one of those quiet pieces of internet... Full Story

  • This article is an updated version of the previous... Full Story

  • You will add ns2 as a secondary (slave) BIND9... Full Story

  • In the process of deploying my lab, I needed... Full Story

  • RFC 8805, used to be known as Self-Correcting IP... Full Story

  • Years back, I wrote an article about certificate pinning. ... Full Story

  • FortiGates have the ability to send alerts to Microsoft... Full Story

  • In this post, I am going to walk through... Full Story

  • Troubleshooting VoIP on a FortiGate can feel like trying... Full Story

  • Prior to FortiOS 7.0, there were three commands to... Full Story

  • In this post, I am going to go over... Full Story

  • What we are going to do:  We are going... Full Story

  • Choosing between FGCP (FortiGate Clustering Protocol) and FGSP (FortiGate... Full Story

  • Creating a VLAN on macOS (The "Pro" Move) A... Full Story

  • This blog post explores the logic behind how macOS... Full Story

  • Pretty Fly for a Wi-Fi Tell My Wi-Fi Love... Full Story

  • Part of my daily gig is creating BoMs (Bill-of-Materials)... Full Story

  • ICMP introduces several security risks, but careful filtering, rate... Full Story

  • The command diag debug application dhcps -1 enables full... Full Story

  • In the world of FortiOS, execute tac report is... Full Story

  • LLDP; What is it The Link Layer Discovery Protocol... Full Story

  • What it actually does When you run diagnose fdsm... Full Story

  • Monkey Bites are bite-sized, high-impact security insights designed for... Full Story

  • I have run macOS in macOS with Parallels but... Full Story

  • Don't be confused with my other FortiNAC posts where... Full Story

  • This is the third session in a multi-part article... Full Story

  • Today I was configuring key-based authentication on a FortiGate... Full Story

  • Netcat, often called the "Swiss Army knife" of networking,... Full Story

  • At its core, IEEE 802.1X is a network layer... Full Story

  • In case you did not see the previous FortiNAC... Full Story

  • This is our 5th session where we are going... Full Story

  • Now that we have Wireshark installed and somewhat configured,... Full Story

  • The Philosophy of Packet Analysis Troubleshooting isn't about looking... Full Story

  • Here is a quick article on running lldp on... Full Story

  • If you have ever stared at a Terminal window... Full Story

  • The Problem This Solves FortiGate matches policies referencing a... Full Story