| FORTISWITCH |
| Layer 2 |
| Jumbo Frames |
| Auto-negotiation for Port Speed and Duplex |
| MDI/MDIX Auto-crossover |
| IEEE 802.1D MAC Bridging/STP |
| IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) |
| IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) |
| STP Root Guard |
| STP BPDU Guard |
| Edge Port / Port Fast |
| IEEE 802.1Q VLAN Tagging |
| Private VLAN |
| IEEE 802.3ad Link Aggregation with LACP |
| Unicast/Multicast traffic balance over trunking port (dst-ip, dst-mac, src-dst-ip, src-dst-mac, src-ip, src-mac) |
| IEEE 802.1AX Link Aggregation |
| Spanning Tree Instances (MSTP/CST) |
| IEEE 802.3x Flow Control and Back-pressure |
| IEEE 802.3 10Base-T |
| IEEE 802.3u 100Base-TX |
| IEEE 802.3z 1000Base-SX/LX |
| IEEE 802.3ab 1000Base-T |
| IEEE 802.3ae 10 Gigabit Ethernet |
| IEEE 802.3az Energy Efficient Ethernet |
| IEEE 802.3bz Multi Gigabit Ethernet |
| IEEE 802.3 CSMA/CD Access Method and Physical Layer Specifications |
| Storm Control |
| MAC, IP, Ethertype-based VLANs |
| Virtual-Wire |
| Split Port (QSFP+ breakout to 4x10G SFP+ or 4x1G SFP) |
| Time-Domain Reflectcometry (TDR) Support |
| LAG min/max bundle |
| Rapid PVST interoperation |
| Ingress Pause Metering |
| Loop Guard |
| Per-port storm control |
| Priority-based Flow Control (802.1Qbb) |
| IEEE 802.1ad QinQ |
| VLAN Mapping |
| IEEE 802.3ba, 802.3bj, and 802.3bm 40 and 100 Gigabit Ethernet |
| Auto topology |
| Services |
| IGMP proxy / querier |
| MLD Snooping |
| MLD proxy / querier |
| IGMP Snooping |
| Layer 3 |
| Static Routing (Hardware-based) |
| Dynamic Routing Protocols: OSPFv2, RIPv2, VRRP, BGP, ISIS * |
| Multicast Protocols: PIM-SSM * |
| ECMP |
| Bidirectional Forwarding Detection (BFD) |
| DHCP Relay |
| IP conflict detection and notification |
| DHCP server |
| Unicast Reverse Path Forwarding - uRPF |
| IPv6 route filtering |
| Filtering routemaps based on routing protocol |
| Security and Visibility |
| Port Mirroring |
| Admin Authentication Via RFC 2865 RADIUS |
| IEEE 802.1X Authentication Port-based |
| IEEE 802.1X Authentication MAC-based |
| IEEE 802.1X Guest and Fallback VLAN |
| IEEE 802.1X MAC Access Bypass (MAB) |
| IEEE 802.1X Dynamic VLAN Assignment |
| Radius CoA (Change of Authority) |
| Radius Accounting |
| MAC-IP Binding |
| sFlow |
| ACL |
| IEEE 802.1ab Link Layer Discovery Protocol (LLDP) |
| IEEE 802.1ab LLDP-MED |
| IEEE 802.1ae MAC Security (MAC Sec) |
| DHCP-Snooping |
| Dynamic ARP Inspection |
| Sticky MAC and MAC Limit |
| IEEE 802.1X open auth |
| IEEE 802.1X EAP pass-through |
| Flow Export (NetFlow and IPFIX) |
| ACL Multistage |
| ACL Multiple Ingress |
| ACL Schedule |
| IP source guard |
| IPv6 RA Guard |
| LLDP-MED ELIN support |
| Per-port and per-VLAN MAC learning limit |
| Assign VLANs via Radius attributes (RFC 4675) |
| High Availability |
| Multi-Chassis Link Aggregation (MCLAG) |
| Quality of Service |
| IEEE 802.1p Based Priority Queuing |
| IP TOS/DSCP Based Priority Queuing |
| IEEE 1588 PTP (Transparent Clock) |
| Explicit Congestion Notification |
| Egress priority tagging |
| Percentage Rate Control |
| Management |
| IPv4 and IPv6 Management |
| Telnet / SSH |
| HTTP / HTTPS |
| SNMP v1/v2c/v3 |
| SNTP |
| Standard CLI and Web GUI Interface |
| Software download/upload: TFTP/FTP/GUI |
| Managed from FortiGate |
| Support for HTTP REST APIs for Configuration and Monitoring |
| Dual Firmware Support |
| RMON Group 1 |
| Packet Capture |
| SPAN, RSPAN, and ERSPAN |
| Link Monitor |
| POE Control Modes |
| System Temperature and Alert |
| Syslog UDP/TCP |
| Provide warning if L2 table is getting full |
| Display Average Bandwidth and Allow Sorting on Physical Port / Interface Traffic |
| System alias command |
| SNMP v3 traps |