Description | This article describes the scenario where the FortiAP did not report its LLDP neighbors to the new primary FortiGate after HA failover. |
Scope | FAP-F series using build v7.0-build0056, v7.0.2 GA, or earlier versions. |
Solution |
When using this topology FGate Cluster ---> FortiSwitch ---> FAP-F, there is missing information after a FortiGate failover the LLDP column no longer shows the switch port information that the FortiAP is connected to under Managed FortiAP.
From the FortiGate side the LLDP FortiAP information is not present, on this command, use the FortiAP serial number at the end of the line:
FGateCluster # diagnose wireless-controller wlac -c wtp FP231FTF21007093
LLDP : enabled (total 0)
From the FortiAP side, there is not any issue with LLDP, all the required information is present:
FortiAP-231F # lldpctl
-------------------------------------------------------------------------------
LLDP neighbors:
-------------------------------------------------------------------------------
Interface: eth0, via: LLDP, RID: 1, Time: 0 day, 00:01:55
Chassis:
ChassisID: mac 04:d5:90:56:c8:f6
SysName: FSwitch
SysDescr: FortiSwitch-124E-FPOE v7.2.6,build0471,231218 (GA)
MgmtIP: 10.255.1.2
Capability: Bridge, on
Capability: Router, on
Port:
PortID: ifname port5
PortDescr: port5
PMD autoneg: supported: yes, enabled: yes
Adv: 10Base-T, HD: yes, FD: yes
Adv: 100Base-T, HD: yes, FD: yes
Adv: 1000Base-T, HD: no, FD: yes
MAU oper type: 1000BaseTFD - Four-pair Category 5 UTP, full duplex mode
To fix this issue, upgrade the FortiAP-F to v7.2.5 or v7.4.3. Once the upgrade is done, the correct information will be reflected under the FortiGate after a failover:
FGateCluster # diagnose wireless-controller wlac -c wtp FP231FTF21007093:
LLDP : enabled (total 1)
local port : lan1
chassis id : mac 04:d5:90:56:c8:f6
sys name : FSwitch
sys description : FortiSwitch-124E-FPOE v7.2.6,build0471,231218 (GA)
capability : Bridge Router
port id : port5
port description : port5
MAU oper type : 1000BaseTFD - Four-pair Category 5 UTP, full duplex mode
ip : 10.255.1.2
vlan id : N/A
|
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.