I have configured my fortiswitches for IGMP-snooping. but after 2-3 days streaming stopped. when I check, the configuration I did was not their. both from Core and distribution switches...
****Core switch Config ---> on MCLAG Peer
config switch vlan
edit 10
set igmp-snooping enable
set igmp-snooping-proxy enable
set igmp-snooping-fast-leave enable
set igmp-snooping-querier enable
MCLAG PEER SWITCH
Distribution Switch.
config switch vlan
edit 10
set igmp-snooping enable
set igmp-snooping-proxy enable
set igmp-snooping-fast-leave enable
set igmp-snooping-querier disable
end
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello ahamza89.
Thank you for using the Community Forum.
I have found this documentation:
https://docs.fortinet.com/document/fortiswitch/7.0.1/administration-guide/607214/igmp-snooping
Could you please tell me if it helped?
Regards,
Hello ahamza89,
We are still looking an answer for your question.
We will come back to you ASAP.
Regards,
Hi,
Are these standalone FSWs or managed by FGT? If managed by FGT, you need to push the config from the FGT.
You can check in the logs for any event due to which config is getting erased.
exec log filter view-lines 1000
exec log display
they all managed by FGT by I've configured the switch individually , configuration not pushed by FGT.
For managed FSW, please push config from fgt to fsw.
FGT is on 6.4.9 and all the switches on 6.4.11 ..
We can enable below options from fgt on the vlan interface.
FortiGate-300D # config system interface
FortiGate-300D (interface) # edit vlan10
FortiGate-300D (vlan10) # set switch-controller-igmp-snooping enable
FortiGate-300D (vlan10) # set switch-controller-igmp-snooping-proxy enable
FortiGate-300D (vlan10) # set switch-controller-igmp-snooping-fast-leave enable
FortiGate-300D (vlan10) # end
Querier option is not available in FOS 6.4, its available in latest FOS Page 113: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/2ef27aa9-0778-11ed-bb32-fa163e...
We can use custom command in 6.4 and push the config to the FSW.
FortiGate-300D # config switch-controller custom-command
FortiGate-300D (custom-command) # edit igmp_querier
new entry 'igmp_querier' added
FortiGate-300D (igmp_querier) # set command "config switch vlan %0a edit 10 %0a set igmp-snooping-querier enable %0a end %0a"
FortiGate-300D (igmp_querier) # end
FortiGate-300D # config switch-controller managed-switch
FortiGate-300D (managed-switch) # edit <FSW serial#>
FortiGate-300D (FSW serial#) # config custom-command
FortiGate-300D (custom-command) # edit 1
new entry '1' added
FortiGate-300D (1) # set command-name igmp_querier
FortiGate-300D (1) # end
On FSW:-
FSW # sh full-configuration switch vlan 10
config switch vlan
edit 10
set description "vlan10"
set igmp-snooping enable
set igmp-snooping-fast-leave enable
set igmp-snooping-querier enable
set igmp-snooping-proxy enable
end
Thanks Sachit, for your detail response.
is there any change in configuration for MCLAG peer core switches?
FGT not pushing the config properly, is there anything I need to check that why isn't pushed properly.
fast-leave and querier addr cmd I cannot see on the switches.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1547 | |
1030 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.