FCSS LAN Edge 7.6 flashcards
FCSS LAN Edge 7.6 · Build recall with a focused review session.
32 cards. Read the term and the definition here. The deck at the top of this page is optional.
- FortiLink
- The management tunnel and protocol between a FortiGate and a FortiSwitch, allowing the FortiGate to act as switch controller for authorization, provisioning, and monitoring.
- CAPWAP ports
- FortiGate-to-FortiAP control traffic uses UDP 5246 and data traffic uses UDP 5247 by default; blocking either port prevents an AP from joining the wireless controller.
- VDOM device scope
- A FortiSwitch or FortiAP is authorized within exactly one VDOM, so its managed-switch or managed-AP object appears only in that VDOM's configuration.
- Backup all
- A FortiOS backup option that includes FortiSwitch and FortiAP configuration in the archive, unlike a standard config backup which omits those device settings.
- Admin profile scope
- An admin profile grants read-write or read-only access per feature area and per VDOM; LAN Edge admins need switch-controller and wireless-controller permissions.
- Firmware compatibility matrix
- FortiOS 7.6 supports specific FortiSwitch and FortiAP firmware branches; running an unsupported image can block authorization or disable features.
- Auto-discovery authorization
- A switch or AP authorization mode in which unknown devices are approved automatically when they connect, without an administrator manually accepting each serial number.
- Manual authorization
- A switch or AP authorization mode requiring an administrator to explicitly approve each device serial number before it becomes managed and can pass traffic.
- Port profile
- A reusable bundle of VLAN membership, native VLAN, PoE, STP, and security settings assigned to FortiSwitch ports to standardize access-edge configuration.
- MCLAG
- Multi-chassis LAG on FortiSwitch, providing active-active redundant links from servers or access switches to two FortiSwitches while keeping separate management addresses.
- FortiSwitch stacking
- Combining multiple FortiSwitches into one logical unit with a single management IP address, simplifying management but sharing a common failure domain.
- DHCP snooping trusted port
- A FortiSwitch port designation that permits DHCP server responses; untrusted ports drop server offers, preventing rogue DHCP servers on the access edge.
- FortiLink LAG
- An LACP bundle between FortiGate and FortiSwitch carrying both management and data traffic, providing link redundancy and higher throughput.
- Model-level template
- A FortiSwitch provisioning template applied to all switches of a given model; per-switch overrides take precedence over template values for VLANs and ports.
- Standalone switch mode
- A FortiSwitch operating without a FortiGate controller, configured locally; converting to managed mode requires FortiLink setup and typically a factory reset.
- Tunnel mode FortiAP
- An AP mode where client traffic is encapsulated in CAPWAP and sent to the FortiGate, so client addressing and policy follow the FortiGate wireless interface.
- Bridge mode FortiAP
- An AP mode where client traffic is bridged locally onto the wired VLAN at the AP, bypassing the FortiGate data path for client packets.
- VAP
- A virtual access point object on the FortiGate that binds an SSID to security, VLAN, and radio settings; VAPs are mapped to FortiAP radios via profiles.
- WPA3 transition mode
- An SSID setting allowing both WPA2 and WPA3 (SAE) clients to associate simultaneously, used during migration before enforcing WPA3-only security.
- 802.11r fast transition
- Fast BSS transition enabling faster roaming between APs by pre-authenticating the client with neighboring APs sharing the same mobility domain.
- Rogue AP classification
- Neighboring APs are classified as accepted, rogue, or unclassified; only accepted APs are excluded from rogue alerts, and classification is per AP profile.
- Per-AP override
- A setting applied to one FortiAP that supersedes the value inherited from its AP profile, such as a fixed channel or transmit power.
- Automatic radio provisioning
- A FortiAP feature where the controller assigns channels and transmit power based on detected interference and neighboring APs, instead of static manual values.
- Mesh mode FortiAP
- An AP mode where a FortiAP without a wired uplink connects wirelessly to a root AP, extending coverage while remaining managed by the FortiGate.
- 802.1X port authentication
- A FortiSwitch port security method where the FortiGate or an external RADIUS server authenticates the supplicant before the port grants network access.
- MAC authentication bypass
- A fallback where the switch authenticates a device by its MAC address against RADIUS when the device has no 802.1X supplicant.
- Dynamic VLAN assignment
- A NAC outcome where the FortiGate assigns a wired or wireless client to a VLAN based on user group, device category, or posture result.
- Automation stitch trigger
- A FortiOS automation that reacts to LAN Edge events such as an AP going offline or a port violation, executing actions like notifications or quarantine.
- Evil twin detection
- A wireless IPS feature flagging an AP broadcasting a monitored SSID with a different BSSID, which can indicate a spoofed access point used for credential theft.
- Deauthentication attack detection
- A wireless IPS feature that logs abnormal volumes of deauthentication frames, which attackers use to force clients onto rogue APs.
- Switch controller diagnose
- FortiGate CLI commands beginning with 'diagnose switch controller' used to inspect FortiLink state, managed-switch status, and port information.
- Wireless controller diagnose
- FortiGate CLI commands beginning with 'diagnose wireless-controller wlac' used to inspect FortiAP join state, client associations, and wireless daemon status.