- FortiGate connects to the EMS Cloud via Fabric Connector.
- FortiGate can connect to the EMS cloud using PPPoE internet when the firmware version is 7.2.5.
- After upgrading the firmware version to 7.4.1, FortiGate cannot connect to the EMS cloud using PPPoE.
Below is the error on the CLI:
Lab-FGT # execute fctems verify 1
Error in requesting EMS fabric connection: -101
issue in getting capabilities. EMS server connection failed with unknown issue. curlcode: 7
Error (-1@_get_capabilities:458).
Command fail. Return code -9999
- FortiGate can resolve forticlient-emsproxy.forticloud.com FQDN.
Lab-FGT # exe ping forticlient-emsproxy.forticloud.com
PING ac06a1ca5c53e4c2ab080da8b6b12d00-0ee2231ad8afa4b3.elb.ap-southe (52.74.249.14): 56 data bytes
--- ac06a1ca5c53e4c2ab080da8b6b12d00-0ee2231ad8afa4b3.elb.ap-southe ping statistics ---
5 packets transmitted, 0 packets received, 100% packet loss
- FortiSASE is also impacted by this issue if connected to FortiGate via an EMS Cloud connector.
- Upgrade to 7.4.2 or higher to fix this issue as this matches bug 944230.
Below are the workaround options:
- Configure PPoE on the system level. If using VLAN, use workaround 2 or 3:
config system pppoe-interface
edit "PPPOE"
set device <wan interface>
set username <username>
set password <password>
next
end
- Use DHCP or static WAN interface to connect to the EMS Cloud.
- Downgrade FortiGate to v7.2.8 or any 7.2 firmware version.
|
