FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
gpap_FTNT
Staff
Staff
Article Id 189485

Description

 

When switching from NAT mode to Transparent mode, and 'FortiLink' has been already configured, the following error appears:

 

FGT # config sys settings

FGT (settings) # set opmode transparent
Cannot change to Transparent mode because this vdom contains managed switches and switchctl-vlans.
Please clear managed-switches, disable fortilink and retry.
node_check_object fail! for opmode transparent

value parse error before 'transparent'
Command fail. Return code -7610

 

This article describes how to switch from NAT to transparent mode without any errors.

 

Scope

 

FortiGate.

 

Solution


To change the operation mode of the unit, use the following command:


FGT (fortilink) # show
  config system interface
     edit "fortilink"
     set vdom "root"
     set allowaccess ping fabric
     set status down
     set type aggregate
     set lldp-reception enable
     set lldp-transmission enable
     set snmp-index 14
  next
end


Even after disabling the FortiLink interface, the same error message should still appear. If FortiLink has any referenced configurations, remove them.

Go to System -> Settings -> NTP. Also, on the aforementioned FortiLink configuration, unset the IP address and disable all configurations related to FortiLink as shown in the below screenshot.
 

FortiLink_Disabled.png

 

 

Below is the expected result without any error message:

 

FGT # config system settings

FGT (settings) # show full-configuration | grep opmode
set opmode nat

FGT (settings) # set opmode transparent

FGT (settings) # set manageip <IP address/mask>

FGT (settings) # end

 

Output: 

 

FGT # config system settings

FGT (settings) # show full-configuration | grep opmode
set opmode transparent

FGT (settings) # end