FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
akushwaha
Staff
Staff
Article Id 387987
Description This article describes the issue where the OCI SDN connector goes down on the FortiGate.
Scope FortiGate.
Solution

In the following image, the OCI SDN Connector shows as down:

 

OCI DOWN.png

 

Run the following commands:

diagnose debug disable

diagnose debug reset

diagnose debug application ocid -1

diagnose debug en

 

Try to re-establish the SDN connection by disable/enable the SDN connection and that should give the debug output.

 

After sometime disable the debug:

 

diagnose debug disable

 

The following is debug output. The following error may be received:

ocid getting instance metadata
metadata url: http://169.254.169.254/opc/v2/instance/
curl resp: 404, error buf:
curl err: <html>
<head><title>404 Not Found</title></head>
<body bgcolor="white">
<center><h1>404 Not Found</h1></center>
</body>
</html>

st diskte
command_cli_diag:5908 no attribute input.
Command fail. Return code -61

 

To resolve it, first check reachability:

 

execute ping 169.254.169.254

 

It should be reachable via the management interface.

Check the route details for this IP address '169.254.169.254':

 

get router info routing-table details 169.254.169.254

 

The routing must be via port1(Management Interface of the OCI).

 

If routing is via public interface, configure a static route for 169.254.169.254 via port1, which should be the Management Interface of the OCI.

Afterward OCI SDN connector will come up.

 

To display diagnostic commands with:

 

diagnose test application ocid -1

1. show HA stats

2. SDN api test

3. HA api test

4. filter list test

99. restart

 

If needed, restart ocid daemon by running the following command:

 

diagnose test application ocid 99

 

Related article:

Technical Tip: Static routes with address objects or groups