FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
achu
Staff
Staff
Article Id 418867
Description

This article describes the error message 'node_check_object fail! for interface-name” when adding port 7 in an existing FortiLink interface from CLI.

 

riz-kvm43 # config system interface

Iriz-kvm43 (interface) # edit "test"

Iriz-kvm43 (test) # show

config system interface

    edit "test"

        set vdom "root"

        set fortilink enable

        set ip 10.10.10.1 255.255.255.0

        set allowaccess ping fabric

        set type aggregate

        set member "port3" "port4" "port5" "port6"

        set device-identification enable

        set lldp-reception enable

        set lldp-transmission enable

        set snmp-index 15

        set auto-auth-extension-device enable

    next

end

 

Iriz-kvm43 (test) # set member "port3" "port4" "port5" "port6" "port7"

node_check_object fail! for interface-name port7

 

value parse error before 'port7'

Command fail. Return code -651

Scope FortiOS.
Solution

In this scenario, the user is trying to configure port7 to be a member of the FortiLink interface named 'test'. The user is unable to add port7 as it is already configured in a software switch.

 

To verify that port7 is added in a software switch:

 

Iriz-kvm43 # show full | grep -f port7

config system switch-interface

    edit "lan"

        set vdom "root"

        set member "port7" <---

        set type switch

        set intra-switch-policy implicit

        set mac-ttl 300

        set span disable

    next

end

 

The following command can also check the References for port7: 

 

diagnose sys cmdb refcnt show system.interface.name port7
entry used in table system.virtual-switch:name 'lan' entry port:name 'port7' (From 'global')

 

To resolve this issue, port7 should be removed from the software switch interface.

 

Iriz-kvm43 # config system switch-interface

    edit lan

Iriz-kvm43 (lan) # unset member

Iriz-kvm43 (lan) # end

Iriz-kvm43 # show system switch-interface

config system switch-interface

    edit "lan"

        set vdom "root"

    next

end

 

Related article:

Technical Tip: How to Check Referenced Objects