Hello
From few days I'm in company where they build network on fortigate devices, before I work only with mikrotik solution, so i need to understand little bit the "fortios idea" So is good time becouse from saturday we notice strange sitauation.
In this company they have two localization from one to second is some 25 kilometers, they have direct fiber connection between. This fiber cable are connected to Fortiswitch on site A port 51, on site B port 52.
To both Fortiswitch to port1 is connected ISP also with SD-WAN configuration
Site A, Fortiswitch Port1 IPS X1 (vlan_X1 -> Fortilink)
Site B, Fortiswitch Port1 IPS X2 (vlan_X2 -> Fortilink)
On fortigate devices the DMZ port is used for HB, so from both Fortigates DMZ port is connected to port 20 in both Fortiswitch. HA type is A-P, Also SD-WAN
This is small picture how this looks with physical connection, and this issiue we have
On saturday fiber between Site and Site was broken, SD-WAN showed on both fortigates the "Second" link is unreachable, but no internet connection from hosts.
After fiber connection go up, i did some test, and this looks like that:
1. When WAN1 is disconnected everything works, Hosts have internet service on both Sites with WAN2.
2. When WAN2 is disconnected everything works, Hosts have internet service on both Sites with WAN1.
3. When Fiber is disconencted no internet conenction on both Sites
From info I have this works... in last year, No one know what configuration was ok, but i know the update was done many times, and some changes in cfg was done also. But never tested...
I read in fortinet documentation and check few network topology, and no one have in description the situation is here, where WAN are connected to Fortiswitch almost evrywhere WAN is connected to Fortigate ports (but I dont think this is the issiue).
Also I see almost everywhere in doc, where I can see two Sites, isinfo about MCLAG on Fortiswitch, here in cfg I dont see this.
Is someone on this forum who can share his expirence with this solution, or give me link where i can found some info i documentation how to configure HA, and Forlink/SwitchController to resolve issiue.
Regards
