Created on 10-19-2022 07:12 AM Edited on 06-25-2024 10:14 PM By Jean-Philippe_P
Description | This article describes how to fix an issue where FortiSwitch shows as offline on the FortiLAN cloud account despite being active. |
Scope | FortiSwitch 22.x. |
Solution |
To manage FortiSwitch with a FortiLAN cloud configuration, refer to page 12 of the FortiSwitch OS Administration Guide.
The FortiSwitch should be registered and have ports 5246, 5247, and 443 opened in the network. Sometimes, even when the FortiSwitch is registered under FortiCare and has these ports open, the FortiSwitch still shows offline on the FortiLAN cloud portal.
It is possible to check the connection status of FortiLAN Cloud from the switch:
get system flan-cloud get system flan-cloud-mgr connection-info
One possible cause is an SSL setup failure due to an incorrect time on the FortiSwitch. Ensure the time is correct in the FortiSwitch to facilitate proper certificate exchange between the FortiLAN cloud and FortiSwitch. Make sure NTP is synchronized.
diagnose sys ntp status
An SSL setup failure can be identified by using the following commands on Fortiswitch:
diagnose debug application flan-mgr -1
To stop the log, use the following commands:
diagnose debug disable
If an SSL setup failure occurred, the logs will display similar information to the following:
In this log, the SSL setup fails because the time on the FortiSwitch is incorrect, which prevents validation of the certificate. Correct the time configuration on FortiSwitch to allow it to show as online on FortiLAN Cloud. See page 47 of the FortiSwitch OS Administration Guide for instructions on how to correct the time configuration. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.