FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
guptab
Staff
Staff
Description
This article describes how to troubleshoot issues with FortiSwitch where the ports are partially or fully greyed out on the FortiGate GUI under Wi-Fi and Switch Controller -> Managed Switch Tab.

Solution
1) From GUI, the switch has last 26 ports greyed out and is not listed as a part of FortiSwtch ports in both GUI and CLI.





2) When seeing the available ports in the CLI of the FortiGate only the first 26 ports are listed.
# config switch-controller managed-switch S448DNTF0-----1
#(managed-switch) edit S448DNTF10-----1
(S448DNTF00-----1) # show full-configuration <---- This shows only 26 ports while the switch has 52 ports altogether.
3) Run the below FortiLink debug to check for any errors while FortiGate checks for the port properties of the switches.
FGT1 # diagnose debug application fortilinkd -1
Debug messages will be on for 30 minutes.
FGT1 # diagnose debug enable
4) In this debug, see the below errors related to ports 27-52 while trying to update the switch port properties from the switch.
Line 13879: 151s:952ms:202us fl_node_apply_switch_port_properties_update_with_portname[792]:Can not find port(port28) in switch S448DNTF-----1
Line 13880: 151s:952ms:457us fl_node_apply_switch_port_properties_update_with_portname[792]:Can not find port(port29) in switch S448DNTF-----1
Line 13881: 151s:952ms:704us fl_node_apply_switch_port_properties_update_with_portname[792]:Can not find port(port30) in switch S448DNTF-----1
Line 13882: 151s:952ms:950us fl_node_apply_switch_port_properties_update_with_portname[792]:Can not find port(port31) in switch S448DNTF-----1
Line 13883: 151s:953ms:195us fl_node_apply_switch_port_properties_update_with_portname[792]:Can not find port(port32) in switch S448DNTF-----1
Line 13884: 151s:953ms:440us fl_node_apply_switch_port_properties_update_with_portname[792]:Can not find port(port33) in switch S448DNTF-----1
5) If such errors are noticed physically disconnect FortiSwitch from the FortiGate.
6) Delete FortiSwitch from managed switch list of the FortiGate. Note that the switch config will also get deleted.
7) Manually add FortiSwitch using its serial number under Wi-Fi & Switch controller > Managed switch and select 'Create New'.





From CLI.
# config switch-controller managed-switch
    edit "S448DNTF190-----"   
        set fsw-wan1-peer "fortilink"
        set fsw-wan1-admin enable
    next
end
8)    Re-connect the switch back to FortiGate and check if the missing ports are now listed on the FortiGate.

Contributors