FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
pmanak
Staff
Staff
Article Id 369555
Description

This article describes troubleshooting steps to perform when managed FortiSwitches are showing as offline after upgrading the FortiGate firewall to FortiOS version 7.6.1 or above

Scope FortiGate v7.6.1, v7.6.2.
Solution

When users update FortiGate firmware to 7.6.1 or above and observe that a FortiSwitch goes offline, it is necessary to check the settings on the FortiLink enabled interface.

 

If Link-Layer Detection Protocol (LLDP) is set to disable/vdom under the FortiLink interface, use the following commands to enable it. This will bring the FortiSwitches online:

 

config system interface

    edit <port>

        set lldp-reception enable

        set lldp-transmission enable

    end

 

This behavior occurs due to a behavior change introduced in v 7.6.1 where the default method used to discover FortiLink members (i.e. set fortilink-neighbor-detect under config system interfaces) was changed from fortilink to lldp. LLDP must also be enabled for this fortilink-neighbor-detect method to work, which is why enabling lldp-reception and lldp-transmission is required.

 

For more info, refer to entry #1061121 on the following page: FortiOS 7.6.1 Release Notes (Changes in default behavior)

 

In case the above commands are already in place but still unable to bring up the FortiSwitch online, try to enable device-identification under the FortiLink interface.

 

config system interface

    edit <port>

       set device-identification enable

    end

 

Related document:

Known issues