FortiSwitch
FortiSwitch: secure, simple and scalable Ethernet solutions
AmeyMaha
Staff
Staff
Article Id 326570
Description This article describes how to resolve an issue where the FortiSwitch-2048F port link does not come up when connecting to FortiGate-601F (10/25G ports) and FortiSwitch-648F.
Scope FortiSwitch, FortiGate.
Solution

Diagram:

 

FortiGate-601F -> FortiSwitch-2048F -> FortiSwitch-648F.

 

  1. Check the phy-mode on the Fortiswitch-2048F ports to make sure 10G/25G are used on them (this is when connecting to either FortiGate or FortiSwitch).

 

FortiSwitch CLI:


config switch phy-mode
    set port1-port12-phy-mode 25G
    set port13-port24-phy-mode 1G/10G
    set port25-port36-phy-mode 25G
    set port37-port48-phy-mode 25G
end

 

  1. Disable the FEC-state when connecting FortiSwitch-2048F to FortiSwitch-648F:

 

FortiSwitch CLI:


config switch physical-port
    edit port3
        set fec-state disabled
    show
end

 

FortiGate switch-controller CLI:


config switch-controller managed-switch
    edit <FSW SN>
        config ports
            edit port3
                set fec-state disabled
            show
        end

 

Check:

 

diagnose switch physical-ports list port3

 

  1. FortiGate-601F 10G-25G ULL ports change (x5,x6,x7,x8 ports of the FortiGate-601F can either be set to 10G/25G).

 

FortiGate CLI:


config system npu
    set ull-port-mode 10G or 25G
end


FortiGate will perform a reboot after this change. Once it comes online, the ports of the FortiGate will either have 10G or 25G speed set on them.

After these changes, the FortiSwitch-2048F links will connect to the FortiGate-601F and FortiSwitch-648F.

 

For the Link between FortiSwitch-2048F and FortiSwitch-648F not coming up:

 

For example: FortiSwitch-2048F (port2) -> FortiSwitch-648F (port55).

 

Check the configuration on port 2 and port 55 on each switch 

 

Current config: 

FortiSwitch- 2048 :


edit "port2"
    set fec-state disabled   <-----
    set lldp-profile "default-auto-isl"
    set speed auto-module

 

648 FortiSwitch:


edit "port55"
    set dmi-status global
    set fec-state cl74 
<-----

 

In this case, make sure to set the fec state as cl74 on the FortiSwitch-2048F side too.

 

New config on FortiSwitch-2048F:

 

edit "port2"

    set fec-state cl74