FortiProxy
FortiProxy provides enterprise-class protection against internet-borne threats and Advanced Web Content Caching
jcastellanos
Staff
Staff
Article Id 340835
Description This article describes how to resolve a scenario where flaps to the other associated sub interfaces are caused by any change of config in an aggregate interface type.
Scope FortiProxy 7.4.x.
Solution

Customer could have an interface aggregate configured in the FortiProxy. And sub interface linked to the aggregate interface.

 

edit "servicios"

set vdom "servicios"
set allowaccess ping
set type aggregate
set member "port70"
set role lan
set snmp-index

next


edit "vlan80"

set vdom "servicios"
set ip 192.168.80.80 255.255.255.0
set allowaccess ping
set role lan
set snmp-index
set interface "servicios"
set vlanid 80

next

 

edit "vlan30"

set vdom "servicios"
set ip 192.168.30.30 255.255.255.0
set allowaccess ping
set explicit-web-proxy enable
set role lan
set snmp-index
set interface "servicios"
set vlanid 30

next


It is possible to modify the interface settings, such as allowaccess snmp.


0: config vdom
0: edit servicios
0: config system interface
0: edit "servicios"
0: set allowaccess ping snmp

 

This may result in the interfaces associated with the aggregate interface going down and then quickly up.

 

tz="-0300" logid="0100020099" type="event" subtype="system" level="warning" vd="servicios" logdesc="Interface status changed" action="interface-stat-change" status="UP" msg="Link monitor: Interface vlan80 was turned up"
tz="-0300" logid="0100020099" type="event" subtype="system" level="warning" vd="servicios" logdesc="Interface status changed" action="interface-stat-change" status="UP" msg="Link monitor: Interface vlan30 was turned up"

tz="-0300" logid="0100020099" type="event" subtype="system" level="warning" vd="servicios" logdesc="Interface status changed" action="interface-stat-change" status="DOWN" msg="Link monitor: Interface vlan80 was turned down"
tz="-0300" logid="0100020099" type="event" subtype="system" level="warning" vd="servicios" logdesc="Interface status changed" action="interface-stat-change" status="DOWN" msg="Link monitor: Interface vlan30 was turned down"

This could be related to bug 1066013, wherein any change over the aggregate interface type creates a flap in all interfaces associated.

This issue will be solved in FortiProxy v7.4.6.