FortiSwitch problem

[amilojevic]

Does anyone can tell me what is this log mean?

date="2023-12-13" time="12:37:01" id=7312041904298786884 bid=47091400 dvid=1073 itime=1702467423 euid=3 epid=3 dsteuid=3 dstepid=3 logver=604031778 logid="0114032694" type="event" subtype="switch-controller" level="warning" msg=" doFailDetail:/bin/poed: time out Cmd:21 69 01 ff ff ff ff ff ff ff ff 83 resp dump2a 0f 02 00 00 00 00 00 00 00 00 3b " logdesc="FortiSwitch PoE" sn="SerilXXXXXXXXX" user="Fortilink" name="SwitchName" eventtime=1702467422529031925 tz="+0100" devid="FrotiGateSerila" vd="root" devname="FG NAME"

There are no host, only fortiswitches are connected. We done updgrade (6.4.4 to 7.0.5), still have problem, every  6sec get this message.

Everything works, but if after restart getting this error :

date="2023-12-13" time="12:32:17" id=7312040675938140336 bid=47091269 dvid=1073 itime=1702467137 euid=3 epid=3 dsteuid=3 dstepid=3 logver=604031778 logid="0114022891" type="event" subtype="switch-controller" level="error" msg="port-edit:port4 failed:-7622" logdesc="Switch-Controller Switch Sync Error" sn="SERIALXXXXX" user="Switch-Controller" ui="flcfgd" name="SWNAME" eventtime=1702467137494103201 tz="+0100" devid="FGSERIAL" vd="root" devname="FGNAME"

[AEK]

Can you share the below from FG:

diagnose debug config-error-log read

[amilojevic]

>>> "config" "firewall" "policy64" @ root:command parse error (error -61)
>>> "config" "firewall" "policy46" @ root:command parse error (error -61)
ffdb_err_msg_print: ret=-4, Error: kernel error
ffdb_err_msg_print: ret=-4, Error: kernel error
ffdb_err_msg_print: ret=-4, Error: kernel error

[AEK]

There are configuration errors, probably the upgrade path has not been followed.

In case this is a lab, I'd first perform a factory reset on the devices and reconfigure again.

[amilojevic]

Log is from FortiSwitch, only one send this error to FA and we have 8 on that location. That message was before upgrade and the same is after upgrade. All other switches dont have this error.

date="2023-12-13" time="12:37:01" id=7312041904298786884 bid=47091400 dvid=1073 itime=1702467423 euid=3 epid=3 dsteuid=3 dstepid=3 logver=604031778 logid="0114032694" type="event" subtype="switch-controller" level="warning" msg=" doFailDetail:/bin/poed: time out Cmd:21 69 01 ff ff ff ff ff ff ff ff 83 resp dump2a 0f 02 00 00 00 00 00 00 00 00 3b " logdesc="FortiSwitch PoE" sn="SerilXXXXXXXXX" user="Fortilink" name="SwitchName" eventtime=1702467422529031925 tz="+0100" devid="FrotiGateSerila" vd="root" devname="FG NAME"

[AEK]

It looks PoE related issue.

The below article may help you.

https://community.fortinet.com/t5/FortiSwitch/Troubleshooting-Tip-Diagnosing-a-PoE-fault-on-a-FortiS...

[amilojevic]

I tried that. but I have 2 problems :D

When I try from FG I get:

command parse error before 'poe-pre-standard-detection'
Command fail. Return code -61

There is no set poe-pre-standard-detection in list.

FG also do not allow me to change anything on switch.

Try to change description get in log:

port-edit:port5 failed:-7622

Config download failed

sync-status=Sync-Error

I can change port settings on switches that are behind this one.

When I go directly to switch CLI and try to edit port poe I get this message:

object set operator error, 5 discard the setting
Command fail. Return code 5

I can change description normaly. 

[amilojevic]

EDIT:

get switch poe inline
error get poe inline

from switch CLI

[amilojevic]

I found problem. 

Check if any port is showing an error. Open a ticket with Fortinet support and attach the output.

4) It is also necessary to verify the POE firmware version:

- If POE Firmware Version is 0.0.0.0 or 15.15.15.15 it is in an error state. Power down the device for 30 minutes and power it back. If the error persists, contact Fortinet support.

I have 15.15.15.15