FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
yangw
Staff
Staff
Article Id 334180
Description This article describes how to solve the FortiSwitch configuration sync error by modifying settings.
Scope FortiOS 7.4.4+, 7.6.0+
Solution

After FortiGate upgraded the firmware to 7.4.4+and 7.6.0+ with FortiSwtich compatible version 7.4.3+ and 7.6.0+, the configuration will not able to be synced when modifying the setting on FortiGate GUI (example: shutdown interface, change Native VLAN on an interface).

 

The configuration synchronization without problem by modifying settings under the FortiGate CLI console.

 

The command and result below can be verified to see if they match the issue.

Run the command below in the FortiGate CLI console:

 

execute switch-controller get-sync-status all

 

Checking if the console displays the result below:

 

REST API login failed with error 60

 

The issue can be resolved without sync error by changing the tunnel mode from strict to moderate.

De-authorize and authorize the FortiSwitch.

 

config switch-controller system
    set tunnel-mode moderate

end