FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
salemneaz
Staff
Staff
Article Id 420297
Description This article outlines the troubleshooting steps to follow when the FortiLink interface experiences intermittent connectivity outages.
Scope FortiGate 7.6 and above.
Solution

In certain scenarios on FortiOS 7.6.x, a FortiSwitch managed over FortiLink may transition to an offline state. To re-establish communication, it is required to perform an administrative reset of the FortiLink interface (interface down/up), which forces a renegotiation and restores the link. This affects only FortiLink type of aggregation interface.

 

execute switch-controller get-conn-status


Managed-devices in current vdom root:

FortiLink interface : fortilink
SWITCH-ID VERSION STATUS FLAG ADDRESS JOIN-TIME SERIAL
Switch1 N/A Authorized/Down 2 N/A SR24xxxxxxxxxxxx
Switch2 N/A Authorized/Down 2 N/A SR24xxxxxxxxxxxx
Switch3 N/A Authorized/Down 2 N/A S124xxxxxxxxxxxx

Flags: C=config sync, U=upgrading, S=staged, D=delayed reboot pending, E=config sync error, 2=L2, 3=L3, V=VXLAN, T=tunnel, X=External
Managed-Switches: 3 (UP: 0 DOWN: 3 MAX: 48)

 

diagnose debug disable
diagnose debug reset
diagnose debug application fortilinkd -1
diagnose debug console timestamp en
diagnose debug disable

 

Debug messages will be on for 30 minutes.

FGT#
daemon: rescehdule timer_list_item 0x55b3110a50

daemon: wait for event up to 0s:120000us

daemon: rescehdule timer_list_item 0x55b31109e0

daemon: wait for event up to 0s:380000us

daemon: rescehdule timer_list_item 0x55b3110a50

daemon: wait for event up to 0s:420000us

daemon: wait for event up to 0s:400000us

156s:107ms:978us flp_recv_pkt[241]:rx disabled port (x1)

daemon: wait for event up to 0s:20000us
156s:108ms:10us flp_recv_pkt[241]:rx disabled port (x1)

daemon: wait for event up to 0s:20000us

daemon: wait for event up to 0s:20000us

daemon: rescehdule timer_list_item 0x55b3110970

daemon: wait for event up to 0s:80000us

daemon: wait for event up to 0s:310000us

 

The logs show the FortiLink daemon rescheduling timer list items and waiting for events. This indicates the daemon is actively managing tasks and events related to FortiLink operations, in order to re-establish the communication with the switch the Fortilink needs to be disabled and enabled, or change the fortilink-neighbor-detect setting from fortilink to LLDP to improve stability.

 

config system interface

    edit <fortilink-interface-name>

        set fortilink-neighbor-detect lldp
        set lldp-reception enable
        set lldp-transmission enable
end

 

This is a known issue and this is already fixed in FortiOS version 7.4.9, 7.6.4 and at the Future release 8.0.0.