Amber Color Port LED

[sagvan]

Hello, dears!
I hope this message finds you well.

On our Fortigate, we have 2 lines, one for backup. The backup cable (LAN) comes from an antena, and we have used an injector to give it power.

The port LED turned amber and doesn't blink. This has happened before, and I kept moving to a new port, which have made me use around 3 ports for the same line. This is so annoying to configure new ports for the same purpose.

EDIT: The problem is the connection is shown on the SD-WAN Zone, but with very low speeds of bps, making it not usable at all.

Now, it has happened again. I don't know ho to solve this.

NOTE:

- The line works when I connect it to my PC directly.

- We have used SD WAN Rules and Firewall Policies to make different SSIDs use the Main line and Backup line.

#Fortigate 

[funkylicious]

hi,

according to this, https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/997251/leds solid color means connected, amber could just mean it's negociating 100M , e.g. for 30/50 models - https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/c6f59d53-1a12-11e9-9685-f8bc12... 

Ethernet Ports Speed

Green: Connected at 1Gbps

Amber: Connected at 100Mbps

Off: Not connected or connected at 10Mbps

[sagvan]

The problem is the connection is shown on the SD-WAN Zone, but with very low speeds of bps.

[funkylicious]

so, connecting it to a laptop and doing speed tests are giving you better Mbps in terms of speed, than it connected to the FGT and doing similar tests?

[sagvan]

Exactly, connecting it to the FTG 100F doesn't work.

[funkylicious]

doesnt work in what way?

link isnt shown as being UP on FGT side? traffic is not passing ?

[sagvan]

It is like this. 

[funkylicious]

this only shows that based on the sdwan rules and current sessions, one interface is used more than the other in terms of bandwidth.

i would suggest reviewing the sdwan rules in place to steer the traffic.

[sagvan]

I have not changed anything from the rules since it worked last time. And here is the rule for the backup.

[iamakk]

To achieve this, you need to manually create an SD-WAN rule to route certain traffic through the backup link. This is expected behavior, as all your traffic currently goes through the main link.