FortiSwitch
FortiSwitch: secure, simple and scalable Ethernet solutions
zendodg
Staff
Staff
Article Id 331387
Description This article describes how to change the FortiSwitch upgrade method from HTTPS to capwap.
Scope FortiSwitch.
Solution

When having a config sync and Mac sync error, it is possible to have problems upgrading the Fortiswitch. Config sync and Mac sync are made through HTTPS.

 

By default, the FortiSwitch upgrade process is made through HTTPS, so if seeing config sync errors, it is impossible to upgrade FortiSwitch from FortiGate.

 

This could be validated with the command 'exec switch-controller get-sync-status switch-id [SwitchID]', if there are errors on config sync and mac sync, there is an error on the FortiSwitch HTTPS connection.

 

syncerror.PNG

 

To upgrade the FortiSwitch, it is possible to change the upgrade method to CAPWAP.

 

Firmware upgrade (commands in FortiGate):


config switch-controller global
    set https-image-push [enable\disable]     

end

 

If having HTTPS image push is enabled, the upgrade method is going to be HTTPS, if disabling it, the upgrade method is going to be through the CAPWAP tunnel.