STP IN FORTILINK RECOMMENDED CONFIGURATION

Hello,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Hi fasoli,

We are still trying to get you an answer or help. We will respond as soon as possible.

this kind of issues are hard to troubleshoot over a community discussion, I would recomend to no close any ring before performing a LLDP lockdown and a fabric lockdown.

STP Transitions mess with Fortlink Automatization while forming automatic ISL trunks, so it is best to let Fortilink build main network links automatically, then perform lockdowns, it makes network stable and disable Fortilink autolink trunk discovery. then if desire to use ring topology to enable some redundant links you can do it by turning on auto-isl-lldp profile only on needed basics over ports forming those links.

details can be consulted on follwing links and documentation

https://community.fortinet.com/t5/FortiSwitch/Technical-Tip-Enable-lock-down-topo-lldp-profile-on-managed/ta-p/301691

https://community.fortinet.com/t5/FortiSwitch/Troubleshooting-Tip-Lockdown-LLDP-Profile-error-for-FortiSwitch/ta-p/381742

https://docs.fortinet.com/document/fortiswitch/7.6.4/fortilink-guide/173272/optimizing-the-fortiswitch-network

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Lockdown-ISL-remain-enabled-even-disabling-from/ta-p/354252

For specific recomendations about your enviroment you should open a TAC ticket.

Please be adivised about TAC scope of work when contacting a TAC engineer.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-enhance-support-experience-with-TAC/ta-p/356452

hope it helps