Skip to main content
aalrefai
Staff
Staff
August 20, 2024

Troubleshooting Tip: How to eliminate random FortiManager Auto-link failures with provisioned devices using FortiZTP

  • August 20, 2024
  • 0 replies
  • 2807 views
Description

 

This article describes an Auto-link failure that may affect FortiGates newly provisioned through ZTP.

 

Scope

 

FortiManager.

FortiGate.

 

Solution

 

Usually Auto-Link failures can be sensitive to any connectivity issue, like provisioning a device in a remote location with an old internet circuit technology, that might affect the connection between the device and FortiManager, or even any situation which might delay the response to the FortiManager.

 

Graph 1: Progress report showing the failure:

 

Auto link.png

 

In these situations, it is recommended to increase the <discover-timeout>, which allows the FortiManager to wait a longer period of time to listen for a reply from the provisioned device, which will increase the rate of successful connections.

 

To do so, increase the timeout using the following CLI commands:

 

config system dm

set discover-timeout 15  <----- Connection timeout (in seconds) when discovering a device (accepted values: 3 - 15, default = 6).

end

 

Related articles:

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!