Skip to main content
ddeguzman
Staff
ddeguzman
Staff
January 26, 2024

Technical Tip: How to trace which interface connects FortiGate HA-Cluster to Multiple FortiSwitch

  • January 26, 2024
  • 0 replies
  • 1263 views
Description

This article describes how to trace which switch-interface of FortiGate goes to which interface of FortiSwitch if physical cable tracing is not available.

In this example, 2 FortiGate is in the HA cluster. The FortiLink (x1 and x2) interface is connected to 2 FortiSwitches. 
Scope FortiGate.
Solution
  1. Get the MAC address of the FortiSwitch interface to trace:


diagnose switch physical-ports list
diagnose switch physical-ports list [<port_name>]

 

 

  1. Once the MAC-address of the FortiSwitch interface is obtained, trace it on which interface it is present on each FortiGate cluster member. 

    diagnose netlink brctl name host fortilink
    diagnose netlink brctl name host fortilink | grep -i <mac:address:to:filter>

 

Note:

'get sys arp' will not be sufficient because it will show the switch-interface instead and not the particular interface.

Example output in this related KB article:

Technical Tip: How to track associated mac address connected with member port of FortiGate Hardware/Software switch

 

 

  1. Do the same approach on the Secondary FortiGate to trace the interface used.
    To log to the Secondary FortiGate and trace the interface used also, use the command mentioned in the below KB article:
    Technical Tip: How to access secondary unit of HA cluster via CLI
      Terms & ConditionsAccessibility statement