Fortinet Fiber Transeiver not showing UP

[RolandBaumgaertner72]

Hi,

I dont get an original Fortinet Fiber Transeiver UP in networks. We have a FG200F cluster (7.0.13) and we would like to use this conncetion for HA heartbeat Interface and HA Monitor Interface with X1 and X2.

Checking the hardware on CLI I get;

XXXXX_HA2 # diag hardware deviceinfo nic x2
Description :FortiASIC NP6XLITE Adapter
Driver Name :FortiASIC NP6XLITE Driver
PCI Slot :PCI Bus 0000:01
irq :26
Board :200F
lif id :25
lif oid :89
netdev oid :89
Current_HWaddr 00:09:0f:09:00:1b
Permanent_HWaddr 80:80:2c:22:79:0b
========== Link Status ==========
Admin :up
netdev status :down
autonego_setting :1
link_setting :1
speed_setting :10000
duplex_setting :0
Speed :0
Duplex :N/A
link_status :Down
============ Counters ===========
Rx Pkts :0
Rx Bytes :0
Tx Pkts :0
Tx Bytes :0
Host Rx Pkts :0
Host Rx Bytes :0
Host Tx Pkts :0
Host Tx Bytes :0
Host Tx dropped :0
FragTxCreate :0
FragTxOk :0
FragTxDrop :0

XXX_FG200_HA2 #

Strange thing is that with Cisco Transeiver we get the message that it is not certified but it works fine:

XXX_FG200_HA2 # diag hardware deviceinfo nic x1
Description :FortiASIC NP6XLITE Adapter
Driver Name :FortiASIC NP6XLITE Driver
PCI Slot :PCI Bus 0000:01
irq :26
Board :200F
lif id :24
lif oid :88
netdev oid :88
Current_HWaddr 00:09:0f:09:00:1a
Permanent_HWaddr 80:80:2c:22:79:0a
========== Link Status ==========
Admin :up
netdev status :up
autonego_setting :1
link_setting :1
speed_setting :10000
duplex_setting :0
Speed :10000
Duplex :Full
link_status :Up
============ Counters ===========
Rx Pkts :1497
Rx Bytes :844711
Tx Pkts :1456
Tx Bytes :851673
Host Rx Pkts :1499
Host Rx Bytes :824855
Host Tx Pkts :1458
Host Tx Bytes :852843
Host Tx dropped :0
FragTxCreate :0
FragTxOk :0
FragTxDrop :0

XXX_FG200_HA2 #

We tried also with other cables and they are new.

What can we do?

Thanks,

Roland

[AEK]

Hello

• Is it point to point connection or through a switch? Should point to point for HA
• Check if your Fortinet SFPs are not faulty

On the other hand, I read somewhere that it is recommended to use HA dedicated ports because they are not under NPU.

[xshkurti]

@RolandBaumgaertner72 

In case you have a switch in between, you may need to activate L3 for ha communication, or change ethertype as per below link:
Technical Tip: FortiGate HA Heartbeat packet Ether... - Fortinet Community

Regards,

[RolandBaumgaertner72]

Hi,

no they are both connected directly to the FGs, so no switch between them. We ordered 10 Transceiver modules from Fortinet just to be sure. Some of them we wanted to use in the SPF for HA Monitor and Heartbeat, we also use the HA interface of course.

I really dont know why we cant get them UP, I can see the information of the transceiver and we tried like 4 of them. And again, the ones from Cisco are working, we get them UP in X1, X2 right away. The only difference is that I think the cable is cupper.

Thanks!

[AEK]

• Make sure the fiber cable is multimode
• Do you see the SFP LEDs light up when you plug the cable?
• What does this command show: get system interface transceiver

[RolandBaumgaertner72]

No, no lights. I send the CLI with diag hardware deviceinfo nic x2. We bought the cable from Amazon double LC, should be OK.

I will check with the command

[AEK]

Please share command output, cable PN and SFP PN.

[RolandBaumgaertner72]

Hello,

I get this:

Interface port24 - Transceiver is not detected.
Interface x1 - SFP/SFP+ (2.1G)
Vendor Name : FORTINET
Part No. : FTLF8519P3BNLFTN
Serial No. : N8BB1MC
Interface x2 - Transceiver is not detected.
Interface x3 - SFP/SFP+ (10.3G)
Vendor Name : OEM
Part No. : SFP-H10GB-CU1M
Serial No. : CSC230402740083
Interface x4 - Transceiver is not detected.

Optical Optical Optical
SFP/SFP+ Temperature Voltage Tx Bias Tx Power Rx Power
Interface (Celsius) (Volts) (mA) (dBm) (dBm)
------------ ------------ ------------ ------------ ------------ ------------
x1 29.2 3.30 5.32 -5.0 -15.0
x3 N/A N/A N/A N/A N/A
++ : high alarm, + : high warning, - : low warning, -- : low alarm, ? : suspect.

XXX_FG200_HA1 #

Still no lights or UP under network. The PN I dont know what it is, i can send you the link from amazon:

https://www.amazon.es/10Gtek-%C3%93ptica-Monomodo-Convertidor-Longitud/dp/B09GK89CVP/ref=sr_1_3?__mk...

Any ideas?

Thanks!

[AEK]

Hello

According to Amazon this cable monomode, so it will not work with your multimode SFP.

You just have to use a multimode cable.

[RolandBaumgaertner72]

Hello,

now we have a new multimode cable and the interface is still down. 

Interface x3 - SFP/SFP+ (2.1G)
Vendor Name : FORTINET
Part No. : FTLF8519P3BNLFTN
Serial No. : N8ALLQG
Interface x4 - Transceiver is not detected.

Optical Optical Optical
SFP/SFP+ Temperature Voltage Tx Bias Tx Power Rx Power
Interface (Celsius) (Volts) (mA) (dBm) (dBm)
------------ ------------ ------------ ------------ ------------ ------------
x3 26.7 3.32 4.52 -4.9 -4.9
++ : high alarm, + : high warning, - : low warning, -- : low alarm, ? : suspect.

XX_HA2 #

Is it possible that it will not work under these circumstances? Again we would like to use the X1 and X3 Interface as Heartbeat monitor for the HA conecting directly from primary to slave FG.

Thanks!