FOS 7.0.13 port issue

[AEK]

Hello

After updating FG 501E from 7.0.12 to 7.0.13, one of the SD-WAN interfaces stopped working. It means the interface seems connected (green) but can't even ping its immediate gateway. It seems not related with SD-WAN but just with interface. Unfortunately we couldn't do further troubleshooting.

As I heard about few interface related issues with 7.0.13, we did a rollback and the affected interface worked again as before without any issue.

I searched in release notes for some similar know bugs but found nothing.

If you have any useful information or workaround please share.

[hbac]

Hi @AEK,

It might be related to IP pool/VIP behavior changes. Please refer to https://community.fortinet.com/t5/FortiGate/Technical-Tip-IP-pool-and-virtual-IP-behavior-changes-in...

You can try disabling arp-reply for your IP pool if you have any. 

config firewall ippool
edit <name>
set arp-reply disable (default: enable)
next
end

Regards, 

[esalija]

Hi @AEK 

You can run the below commands to check the output for the port that has a problem

# diag netlink interface list name <interface_name>

# diag hardware deviceinfo nic <interface_name>

# fnsysctl ifconfig <interface_name>

https://docs.fortinet.com/document/fortigate/7.4.1/hardware-acceleration/90160/diagnose-hardware-dev...
Best regards,

Erlin

[AEK]

Thanks Hbac & Erlin

I'll take not of your suggestions for our next FW update attempt and I'll let you know.