FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes the issue where the SFP/SFP+/QSFP link after upgrading FortiOS 7.4.7 to 7.4.8 not coming up when the media type is set differently.
Scope
FortiOS 7.4.8.
Solution
In previous FortiOS version (before v7.4.8) the 10G link can be configured as below:
CLI:
config system interface edit "portX" set type physical set mediatype cr set speed 10000auto next end
The media type 'cr' is being used for setting up the type of QFP/SFP+/QSFP modules and for Copper DAC(Direct Attach Copper) cables. The reason to set media type 'cr' inside the interface configuration on FortiGate is that certain interfaces (like SFP+/QSFP+ modules) are media-flexible. That means the same physical port can work with.
If the interface is goes down with the media type 'cr' for 10G links after the mentioned upgrade plan it might be noticed that the interface with identical setup not coming up.
In that case, the workaround is to change and set the interface speed to 10G full which might help to resolve the issue temporarily.
CLI:
config system interface
edit "portX"
set type physical
set mediatype cr
set speed 10000full
next
end
It can happen if the media type is set to 'cr' but the actual SFP/SFP+/QSFP module is 'sr' or 'lr'.
Before the FortiOS version 7.4.8 the media type was not set for actual media type. Which is the reason even after setting up different media type the link was working. For these versions the issue is uncertain that it might work or might not with incorrect media type. As the feature changes from FortiOS 7.4.8, if the media type is incorrect the link will not be up.
