FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
btey
Staff & Editor
Staff & Editor
Article Id 407981
Description This article describes the linkfail status on the FGSP kernel standalone dev_base.
Scope FortiGate, FGSP.
Solution

The linkfail status for kernel standalone dev_base is only applicable when layer2-connection is set to available.

 

config system standalone-cluster
    set standalone-group-id <Group ID>
    set group-member-id <Member ID>
    set layer2-connection available <-----

 

To check the link failure status:

 

diagnose sys ha standalone-peers

 

linkfail2.png

  

If the interface is up, the linkfail will show as 0. This indicates the interface is ready to process the traffic. If layer2-connection is set to unavailable, linkfail status is expected to be 1.

 

config system standalone-cluster
    set standalone-group-id <Group ID>
    set group-member-id <Member ID>
    set layer2-connection unavailable <-----

 

linkfail.png

 

Related document:

UTM inspection on asymmetric traffic in FGSP for more information.

Contributors