FortiSwitch
FortiSwitch: secure, simple and scalable Ethernet solutions
AmeyMaha
Staff
Staff
Article Id 326570
Description This article describes how to resolve an issue where FortiSwitch 2048F port link does not come up when connecting to FortiGate 601F (10/25G ports) and FortiSwitch 648F.
Scope FortiSwitch, FortiGate.
Solution

Diagram:

 

FortiGate 601F -> FortiSwitch 2048F -> FortiSwitch 648F.

 

  1. Check the phy-mode on the Fortiswitch-2048F ports to make sure 10G/25G are used on them (this is when connecting to either FortiGate or FortiSwitch).

 

FortiSwitch CLI:


config switch phy-mode
    set port1-port12-phy-mode 25G
    set port13-port24-phy-mode 1G/10G
    set port25-port36-phy-mode 25G
    set port37-port48-phy-mode 25G
end

 

  1. Disable the FEC-state when connecting FortiSwitch-2048F to FortiSwitch-648F:

 

FortiSwitch CLI:


config switch physical-port
    edit port3
        set fec-state disabled
    show
end

 

FortiGate switch-controller CLI:


config switch-controller managed-switch
    edit <FSW SN>
        config ports
            edit port3
                set fec-state disabled
            show
        end

 

Check:

 

diagnose switch physical-ports list port3

 

  1. FortiGate-601F 10G-25G ULL ports change (x5,x6,x7,x8 ports of the FortiGate-601F can either be set to 10G/25G).

 

FortiGate CLI:


config system npu
    set ull-port-mode 10G or 25G
end


FortiGate will perform a reboot after this change. Once it comes online, the ports of the FortiGate will either have 10G or 25G speed set on them.

After these changes, the FortiSwitch-2048F links will connect to the FortiGate-601F and FortiSwitch-648F.

 

For the Link between 2048F and 648F not coming up:

 

For example: 2048F (port2) -> 648F (port55).

 

Check the configuration on port 2 and port 55 on each switch 

 

Current config: 

2048 FortiSwitch:


edit "port2"
    set fec-state disabled   <-----
    set lldp-profile "default-auto-isl"
    set speed auto-module

 

648 FortiSwitch:


edit "port55"
    set dmi-status global
    set fec-state cl74 
<-----

 

In this case, make sure to set the fec state as cl74 on the 2028F side too.

 

New config on 2048:

 

edit "port2"

    set fec-state cl74