Troubleshooting Tip: Unable to push ‘igmp-flood option’ to managed FortiSwitch
Description
This article describes steps to take if you want to push igmp-flood option on managed FortiSwitch ports.
Related documents:
https://docs.fortinet.com/document/fortiswitch/6.4.3/devices-managed-by-fortios/173274/configuring-igmp-snooping-settings
https://docs.fortinet.com/document/fortiswitch/6.4.3/devices-managed-by-fortios/173271/fortiswitch-network-access-control
Solution
- When a user try to configure the IGMP flood config from FortiGate to any FortiSwitch port the option is not available.
- Reason is that the port has access-mode set to NAC.
- To change the state, make changes in NAC setting:
Notice the igmp-flood config is now available on port.
This article describes steps to take if you want to push igmp-flood option on managed FortiSwitch ports.
Related documents:
https://docs.fortinet.com/document/fortiswitch/6.4.3/devices-managed-by-fortios/173274/configuring-igmp-snooping-settings
https://docs.fortinet.com/document/fortiswitch/6.4.3/devices-managed-by-fortios/173271/fortiswitch-network-access-control
Solution
- When a user try to configure the IGMP flood config from FortiGate to any FortiSwitch port the option is not available.
- Reason is that the port has access-mode set to NAC.
FortiGate-100E (root) # config switch-controller managed-switch- It will not be possible to directly change state from NAC to normal.
FortiGate-100E (managed-switch) edit S448DF3XXXXXX
FortiGate-100E (S448DF3X17-----4) # config ports
edit "port1"
set port-owner ''
set speed auto
set status up
set vlan "vsw.fortilink"
set type physical
set access-mode nac <-----
next
end
- To change the state, make changes in NAC setting:
# config switch-controller nac-settings
edit "fortilink"
set mode global <-----(Set this to local).
end
Notice the igmp-flood config is now available on port.
FortiGate-100E (root) # config switch-controller managed-switchNote: change NAC setting per port will be possible.
FortiGate-100E (managed-switch) edit S448DF3XXXXXX
FortiGate-100E (S448DF3X17-----4) # config ports
# config ports
edit "port1"
set port-owner ''
set speed auto
set status up
set vlan "vsw.fortilink"
set type physical
set access-mode normal <----- State auto changed to normal from NAC.
set igmps-flood-reports disable
set igmps-flood-traffic disable
next
end
