Adding port x1 to fortilink interface brings the port down

[M_G]

Hi, 

I have port x2 already running a fortilink stack for one room, and I'm trying to set up another room using port x1. When first connecting port x1 to the switches, the port's connection went up. However, I noticed that I forgot to add x1 to the fortilink interface.

When I figured this out, I moved port x1 to the fortilink interface, but as soon as I made this change, port x1 went down. Physically, the fiber connections still show light on both ends (looking from the firewall and the switch sides respectively).

If anyone has any idea how I may be able to set this up correctly, please let me know. Any help will be greatly appreciated. 

Thank you, 

M_G

[jintrah_FTNT]

Hi,

Could you please mention the FortiGate model and version? Also, gather the outcome of the below commands,

#diag hard dev nic x1

#diag hard dev nic x2

#diag net agg name fortilink

best regards,

Jin

[M_G]

Hi Jintrah, 

Thank you for the swift response. 

The model is 100F and it is running 7.0.9. 

I'll send the output of the commands via direct message. 

Best regards, 

M_G

[GRSAdmin]

I have exactly the same issue. 

2xFortigate 101F in HA Active-Pasive -> 7.0.12

Fortiswitch -> 7.0.5

[mle2802]

Hi @M_G, 

I believe this is by design of Fortilink interface. You can only connect 1 switch to one port and  and from there you extend to more downstream switches. You can enable split-interface with one active and one standby or using MCLAG.

Please refer to the following documents for more information:

https://docs.fortinet.com/document/fortiswitch/7.0.8/devices-managed-by-fortios/173260/configuring-f...
https://docs.fortinet.com/document/fortiswitch/7.0.4/devices-managed-by-fortios/801204/single-fortig...
https://docs.fortinet.com/document/fortiswitch/7.0.4/devices-managed-by-fortios/801208/transitioning...

Regards,
Minh

[anignan]

Hi @M_G 

No you cant do it that way your default fortilink is a LAG and should connect to one physical switch or a logical switch.. Just remove x1 from fortilink and enable fortilink on x1 that will work as a separate fortilink interface..

config system interface

edit x1

set fortilink enable

next

end

Abdel