Problem with SFP on ULL ports after upgrade from 7.2.9 to 7.4.5

Hello Max-Payne-WSA ,

Did you check speed and duplex settings ? You can further check
the status using the commands :

# diag hardware deviceinfo nic <interface>
# get system interface physical
# get system interface transceiver
# get system interface transceiver <interface>

Regards,

ametkola

We have the same problem on 400F ULL ports with the use of Cisco SFP+ DAC (SFP-H10GB-CU5M), TAC said that they did not reproduce the issue with Fortinet certified transceivers.

Also, downgrading to version 7.4.3 (Feature level release) solves the problem too.

We also had this issue. Turns out it is DAC cables on the ULL ports. Transceivers with fiber cables work just fine. We tried Optec, Fortinet, and FS DAC cables and none of them would come up. This is not listed in the known issues.

Hi @Max-Payne-WSA ,

We have a Mantis 1058256 open for this ULL ports SFP + DAC issue and our Engineering team is working on it for a 7.4 fix.   

Unfortunately, there is no ETA of the 7.4 fix yet. I think that it will be in FortiOS 7.4.6.  But no guarantee. 

Hi,

This issue might be realted to already referenced known issue 1015698 in the release notes of FortiOS v7.4.5:

https://docs.fortinet.com/document/fortigate/7.4.5/fortios-release-notes/236526/known-issues

Regards,

Ankit

We have 601F and now tried several times to upgrade from 7.4.3 to higher versions. We use official Forti SFP28 transceivers, not DAC.

- Update to 7.4.5 failed because ULL ports were down afterwards

- Forti has listed these issues as resolved in 7.4.7 and 7.4.8 (There were two different issues as i understand)

- We tried to upgrade to 7.4.9 today, but still the same issue. ULL interfaces are all down. Also downgrading to 7.4.8 did not solve the problem.

I find it absolutely unbelievable that such a major issue still hasn't been fixed after six versions. Upgrading and downgrading across all versions takes around two hours, during which time our entire environment is down. In my opinion this is a major major major issue, since the only working version, 7.4.3 has several highly critical vulnerabilities and we aren't able to update.