FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ksolovjova
Staff
Staff
Article Id 231356
Description

 

This article describes how to cover the changes in FEC settings for some FortiGates.

It is important to keep FEC settings the same on both FortiGate and switch sides, otherwise, ports will not get up due to mismatch.

 

It is especially important to keep in mind the changes when upgrading the setup to newer FortiOS versions from 6.2 and 6.4.

 

Scope

 

FortiOS 7.0.4 and up, FortiOS 7.2.0 and up.

10G/25G/40G/100G ports.

1100E, 2200E, 3300E, 3400E, 3960E, 3980E models.

 

Solution

 

In 7.0.3

 

FG22E1-2 (port25) # set forward-error-correction ?
enable             <----- Enable forward error correction (FEC).
disable            <----- Disable forward error correction (FEC).

 

'Enable' was forked into two options - Reed-Solomon (FEC CL91) and Fire-Code (FEC CL74).

 

In 7.0.4:

 

FG22E1-2 (port25) # set forward-error-correction ?
disable             <----- Disable forward error correction (FEC).
cl91-rs-fec         <----- Reed-Solomon (FEC CL91).
cl74-fc-fec         <----- Fire-Code (FEC CL74).

 

By default, this setting has the 'cl91-rs-fec' function enabled.

 

It is possible to see the FEC type in the output of '# diagnose hardware deviceinfo nic <port number>' in the Link Settings section:

 

FG22E1-2 # diag hardware deviceinfo nic port25
<omitted>
======== Link Settings ==========
link_autonego :0
link_setting :1
link_speed :25000
link_duplex :1
link_fec :RS (0x3) ---> current value, Reed-Solomon 
link_fec_cap :Off,RS,BaseR (0x1c) --->possible values: off, Reed-Solomon and Fire-Code
link_serdes_if :SR
serdes_if_cap :GMII,SGMII,SR,LR,CR (0x3e)
serdes_dflt :3
pm_mode_setting :2
pm_mode :0x6
pm_mode_dflt :2
pm_port :Yes
medium_mode :0
========== Link Status ==========
<omitted>

 

In case the port does not support FEC, the link_fec and link_fec_cap values are None (0x0).