NSE5 FortiSwitch 7.6 case studies
NSE5 FortiSwitch 7.6 · Put your knowledge to work in context.
The NSE5 FortiSwitch 7.6 credential is a specialist-level certification in the Fortinet certification program, aimed at network and security professionals who deploy, configure, and operate FortiSwitch secure Ethernet switches within a Fortinet Security Fabric environment. Candidates typically already hold foundational Fortinet knowledge and work in roles such as network engineer, security administrator, or managed-services technician responsible for LAN switching, VLAN design, and switch-level port security. The NSE5 FortiSwitch 7.6 case studies are 5 cases and about 5,697 words.
1PoE budget over-subscription on a camera rollout (FortiLink-managed FS-148F-POE)
A warehouse refresh is being cut over with a FortiGate 80F managing three FortiSwitches over FortiLink: two FS-148F-POE units (A and B) in the rack, each with a 370 W PoE budget, plus an FS-108F-POE in the loading dock. Switch A was chosen for the camera rollout: 6 PTZ cameras that negotiate 802.3at (25.5 W at the PD), 2 Wi-Fi 6 access points, also 802.3at, and 12 fixed bullet cameras that negotiate 802.3af Class 3 (12.95 W at the PD).
835 words, about 4 min2Voice VLAN added to a standalone two-switch office: four symptoms, one tagging model
Two standalone FS-124F switches serve a 60-user office with no FortiGate on site; routing, DHCP and internet access come from an upstream firewall. Switch A carries the uplink to the firewall and the file server; switch B serves the first and second floors.
1,214 words, about 6 min3802.1X with MAC bypass: dock users land in the guest VLAN
A regional office has 90 desks, a FortiGate 200F managing FortiSwitch 424E access switches over FortiLink, and RADIUS on FortiAuthenticator for 802.1X. Ports run port-based 802.1X with MAC authentication bypass enabled so that printers and IP phones can connect without a supplicant, with guest VLAN 200 for unauthenticated devices, staff VLAN 100, voice VLAN 40 and printer VLAN 60.
1,250 words, about 6 min4MCLAG pair loses half the rack when the ICL flaps
Two FS-448E switches form an MCLAG pair as the top of rack for a VMware cluster. The inter-chassis link is a single 40G DAC between ports 51 and 52 with MCLAG-ICL enabled; each of six ESXi hosts has two 10G NICs, one cabled to each switch, in a VMware IP-hash bond (no LACP).
1,195 words, about 6 min5Broadcast storm on floor 3: why spanning tree did not save the access port
Five floors are each served by a FortiSwitch 424E, daisy-chained to a FortiGate 200F over FortiLink. On floor 3, the facilities team needed two extra ports, so they plugged a 5-port unmanaged switch into wall port 12 and then ran a second cable from that same unmanaged switch back into wall port 13 on the same 424E.
1,203 words, about 6 min