To manage a FortiSwitch stack, the FortiGate must be configured as the switch controller. This requires two fundamental steps. First, the Switch Controller feature must be enabled under System > Feature Visibility on the FortiGate, which makes the FortiSwitch management options available in the GUI. Second, a FortiLink interface must be configured on the FortiGate. This dedicated interface is used for the management and data communication between the FortiGate and the connected FortiSwitch stack, enabling the FortiGate to discover, authorize, and manage the switches.

C. Only a hardware-based FortiGate can manage a FortiSwitch stack.

This is incorrect. FortiGate-VM models also support the FortiLink protocol and can function as a switch controller to manage FortiSwitch stacks.

D. FortiSwitch must be operating in standalone mode before authorization.

This is incorrect. A FortiSwitch must be in FortiLink mode to be discovered and authorized by the FortiGate. It automatically enters this mode upon detecting a FortiLink signal from the FortiGate.

---

1. Fortinet, FortiSwitch Manager 7.6.0 Administration Guide, Page 10, "Basic configuration".

This section explicitly states: "Before you can use your FortiGate unit to manage a FortiSwitch unit, you need to enable the Switch Controller feature." This supports answer B.

The same section details the next step: "The FortiLink is a dedicated interface for communication between a FortiGate unit and a FortiSwitch unit." This supports answer A.

2. Fortinet, FortiSwitch Manager 7.6.0 Administration Guide, Page 6, "Introduction".

This section clarifies platform support: "You can use a FortiGate or FortiGate-VM unit to manage the FortiSwitch units." This directly refutes option C.

3. Fortinet, FortiSwitch Manager 7.6.0 Administration Guide, Page 12, "Authorizing a FortiSwitch unit".

This section describes the process: "When you connect a FortiSwitch unit to a FortiGate port that is part of FortiLink, the FortiGate unit automatically discovers the FortiSwitch unit." The discovery and subsequent authorization occur while the switch is in FortiLink mode, not standalone mode, refuting option D.