HI,
I am trying to add the aggregated intf / port 3 /4 intf in software switch but getting error as entry not found in datasource, VDOM is set. COuld someone please help on this
This is 3000D model
edit "Aggregated" set vdom "root" set vlanforward enable set type aggregate set member "port3" "port4" set device-identification enable set role lan set snmp-index 22
edit "port3" set vdom "root" set type physical set snmp-index 3 next edit "port4" set vdom "root" set type physical set snmp-index 4
===============
config system switch-interface edit "VXLAN-SW" set vdom "root" set member "VXLAN_IPSEC" next end
(VXLAN-SW)# set member port3 entry not found in datasource
value parse error before 'port3' Command fail. Return code -3
I could not see any ports
(VXLAN-SW) # set member *interface-name Physical interface name. VXLAN_IPSEC interface port6 interface port7 interface port8 interface port9 interface port10 interface port11 interface port12 interface port13 interface port14 interface port15 interface port16 interface
Once you aggregated two physical interfaces port3 and port4, you can't configure almost anything to individual ports. They act as a single port as you configured "Aggregated". If you want to add them to a soft-switch, you have to add "Aggregated" as a port.
Hi,
Thanks. But unfortunately I am not seeing any of those ports, Only I am seeing the Unused ports.
(VXLAN-SW) # set member *interface-name Physical interface name. VXLAN_IPSEC interface port6 interface port7 interface port8 interface port9 interface port10 interface port11 interface port12 interface port13 interface port14 interface port15 interface port16 interface
Perhaps it's already referred by something, like DHCP server or policy, then it can't be a new member of another logical interface. Just go to Network->Interfaces view in GUI and check the number of references on the far right of "Aggregated" interface row.
Or in CLI at the top of the config tree, type "show | grep -f Aggregated".
Yes the interface is tagged with 4 Policies, system HA and 15 system Vlan interface . It is not possible to remove the vlan interfaces but with the policies, it is possible.
Will it work if I remove these policies. Please suggest
And I tried removing the policies. It dint help
You need to remove ALL references to the aggr. port in order to be able to add it to the switch.
Usually it's easier to save the config in cleartext, edit in the changes and restore it to the FGT (will reboot).
I'd doubt this really makes sense as a software switch will prevent the FGT from offloading traffic to the ASIC. The CPU load will rise substantially. Might perhaps work if you use an aggregated port for redundancy only.
And the 3000D does not have a hardware switch ('conf sys virtual-switch')?
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1740 | |
1108 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.