Skip to main content
ITGEMINI
New Member
February 5, 2025
Question

SPAN (Port Mirror)

  • February 5, 2025
  • 11 replies
  • 2730 views

Unable to create a span session under a vlan switch in fortios 7.2.8

11 replies

Toshi_Esumi
SuperUser
SuperUser
February 5, 2025

Please share us your config under "config system virtual-switch"(hard-switch) or "config system switch-interface"(soft-switch), whichever you configured.

Toshi

ITGEMINI
ITGEMINIAuthor
New Member
February 5, 2025

config system virtual-switch
edit "lan"
set physical-switch "sw0"
config port
edit "port1"
next
edit "port8"
next
end
next
end

Toshi_Esumi
SuperUser
SuperUser
February 5, 2025
ITGEMINI
ITGEMINIAuthor
New Member
February 5, 2025

it tried here is the command and response

 

min-201G (virtual-switch) # edit "lan"

Admin-201G (lan) # set span enable

command parse error before 'span'
Command fail. Return code -61

Admin-201G (lan) #

Toshi_Esumi
SuperUser
SuperUser
February 5, 2025

Maybe G series has different command or not supported yet? Does anyone else know?

Toshi

ITGEMINI
ITGEMINIAuthor
New Member
February 5, 2025

it appears that through the gui it will not allow span on vlan switches only.

Toshi_Esumi
SuperUser
SuperUser
February 5, 2025

The 7.2.10 CLI referece says "* This parameter may not exist in some models." 

https://docs.fortinet.com/document/fortigate/7.2.10/cli-reference/101854390/config-system-virtual-switch

Toshi

ITGEMINI
ITGEMINIAuthor
New Member
February 5, 2025

it works under a virtual switch but not under the vlan switch.

Toshi_Esumi
SuperUser
SuperUser
February 5, 2025

You're talking about GUI, right? Can you check the CLI under config sys virtual-switch when you configured it in GUI under VLAN switch?
The CLI part should be the same between VLAN switch and hard-switch (virtual-switch).

Toshi

ITGEMINI
ITGEMINIAuthor
New Member
February 5, 2025

what i sent early was the cli for the virtual switch that the vlan switch is set up under.

Toshi_Esumi
SuperUser
SuperUser
February 5, 2025

Ok, then it must be configured at a different place. Can you get in CLI at the top hierarchy, then run "show | grep -f span"?
That would show you the config block that has "span" configured.

Toshi

ITGEMINI
ITGEMINIAuthor
New Member
February 5, 2025

Admin-201G # show | grep -f span
config switch-controller initial-config template
edit "rspan" <---
set vlanid 4092
set dhcp-server enable
next
end

Toshi_Esumi
SuperUser
SuperUser
February 5, 2025

That's just a FortiSwitch config template. So it's not configured anywhere even you can configure it in GUI.

 

Toshi

Toshi_Esumi
SuperUser
SuperUser
February 5, 2025

You might need to open a ticket at TAC to get any definitive answer.

Toshi