Skip to main content
New Member
September 20, 2007
Question

Auto negotiation on internal interface 100A

  • September 20, 2007
  • 5 replies
  • 8590 views
Can anyone advise please ? We have a fortigate 100A and the internal ports only connect to a HP 1GB port switch at 10mb half duplex. There is no way of changing the internal ports to 100mb full so the HP switch cannot be anything but auto negotiation!

    5 replies

    rwpatterson
    New Member
    September 20, 2007
    From the CLI, check out the following:
    FGT 1000a $ config system interface    (interface)$ edit port10 (Use your interface name here!!)    (port10)$ set speed ?  1000full    1000M full-duplex  1000half    1000M half-duplex  100full     100M full-duplex  100half     100M half-duplex  10full      10M full-duplex  10half      10M half-duplex  auto        auto adjust speed    (port10)$ end    FGT 1000a $
    New Member
    September 20, 2007
    The 100A has a 4 port switch for its internal interface so the options are not available ! The WAN and DMZ ports being individual can be set as you describe using the CLI.
    rwpatterson
    New Member
    September 20, 2007
    Is there a way to monkey around with the HP to force 100 MB full?
    New Member
    September 20, 2007
    Prior to connecting to the HP 1GB switch we used an Allied Telesyn 10/100. The fortigate connected at 100m full. I have asked for the HP switch to be set to Auto 10/100 negotiate only so will see what that does !
    New Member
    September 20, 2007
    Yes, this has been tried but the fortigate still only shows a connection of 10m full. The HP switch shows the connection as 100m full regardless of auto or forced 100m full ?!
    FortiRack_Eric
    New Member
    September 21, 2007
    I' m sorry to disappoint you, the speed command is not available on individual ports in interface mode. Just tested it. That leaves the upgrade MR5 and using the set internal-switch-speed or use a DMZ port as an internal. In MR5 you can label the network port via an alias DMZ = internal Regards, Eric
    abelio
    New Member
    September 26, 2007
    I' m sorry to disappoint you, the speed command is not available on individual ports in interface mode. Just tested it.
    ok; good point. Thanks for clarify.
    That leaves the upgrade MR5 and using the set internal-switch-speed or use a DMZ port as an internal. In MR5 you can label the network port via an alias DMZ = internal
    Exactly; David: Eric' s workaround seems to be more appropiate here.