SuperUser

Question

FOS 7.0.13 port issue

Forum|Forum|2 years ago
December 14, 2023
3 replies
1426 views

Hello

After updating FG 501E from 7.0.12 to 7.0.13, one of the SD-WAN interfaces stopped working. It means the interface seems connected (green) but can't even ping its immediate gateway. It seems not related with SD-WAN but just with interface. Unfortunately we couldn't do further troubleshooting.

As I heard about few interface related issues with 7.0.13, we did a rollback and the affected interface worked again as before without any issue.

I searched in release notes for some similar know bugs but found nothing.

If you have any useful information or workaround please share.

FortiGate

Staff

Hi @AEK,

It might be related to IP pool/VIP behavior changes. Please refer to https://community.fortinet.com/t5/FortiGate/Technical-Tip-IP-pool-and-virtual-IP-behavior-changes-in-FortiOS/ta-p/277823

You can try disabling arp-reply for your IP pool if you have any.

config firewall ippool
edit <name>
set arp-reply disable (default: enable)
next
end

Regards,

Staff

Hi @AEK

You can run the below commands to check the output for the port that has a problem

# diag netlink interface list name <interface_name>

# diag hardware deviceinfo nic <interface_name>

# fnsysctl ifconfig <interface_name>

https://docs.fortinet.com/document/fortigate/7.4.1/hardware-acceleration/90160/diagnose-hardware-deviceinfo-nic-interface-name-number-of-packets-dropped-by-an-interface
Best regards,

Erlin

AEKAuthor

SuperUser

Thanks Hbac & Erlin

I'll take not of your suggestions for our next FW update attempt and I'll let you know.

AEK