FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kcheng
Staff & Editor
Staff & Editor
Article Id 411784
Description This article describes how to troubleshoot the issue on FortiGate-80F, where the interfaces of wan1 and wan2 (fiber connection_ are down after upgrading to v7.4.8).
Scope FortiGate-80F v7.4.8.
Solution

After upgrading FortiGate-80F to v7.4.8, the interfaces of wan1 and wan2 are showing as down if a fiber connection was used before the upgrade. To confirm the status, the following should be checked:

  1. Both wan1 and wan2 interface ports are connected with fiber cables.
  2. Issue the following command to confirm that SFP readings are healthy:

get system interface  transceiver

 

  1. Run the following commands to verify if the interface Admin status is up:

 

diagnose hardware deviceinfo nic wan1

diagnose hardware deviceinfo nic wan2

 

Sample output:

 

========== Link Status ==========
Admin :up
netdev status :down
autonego_setting :1
link_setting :1
speed_setting :1000
duplex_setting :0
Speed :10
Duplex :N/A
link_status :Down

 

  1. Run the following command to check the physical interface settings:

 

get system interface physical wan1

get system interface physical wan2

 

The medium is showing as copper, the issue faced matches a known issue reported for FortiGate-80F v7.4.8:

 

FGT # get system interface physical wan2
== [onboard]
        ==[wan2]
                mode: static
                ip: 1.1.1.1 255.255.255.255
                ipv6: ::/0
                status: down
                speed: n/a
                medium: copper
                FEC: none
                FEC_cap: none

 

The issue is resolved in v7.4.9 and v7.6.4. The workaround for v7.4.8 is to set the medium type to fiber manually:

 

diagnose hardware shared-port wan1 fiber

diagnose hardware shared-port wan2 fiber

 

The commands need to be issued on Primary and Secondary devices separately if HA is configured.

Contributors