Problem with SFP on ULL ports after upgrade from 7.2.9 to 7.4.5

[Max-Payne-WSA]

Hi, due to the transition of software 7.4 to mature status, we decided to update the 401F from version 7.2.9 to 7.4.5.

Unfortunately, after the update, the SFP ports x5-x8 (ULL) have no link.
Downgrading to version 7.2.10 solved the problem.

[dasfliege]

We have 601F and now tried several times to upgrade from 7.4.3 to higher versions. We use official Forti SFP28 transceivers, not DAC.

- Update to 7.4.5 failed because ULL ports were down afterwards

- Forti has listed these issues as resolved in 7.4.7 and 7.4.8 (There were two different issues as i understand)

- We tried to upgrade to 7.4.9 today, but still the same issue. ULL interfaces are all down. Also downgrading to 7.4.8 did not solve the problem.

I find it absolutely unbelievable that such a major issue still hasn't been fixed after six versions. Upgrading and downgrading across all versions takes around two hours, during which time our entire environment is down. In my opinion this is a major major major issue, since the only working version, 7.4.3 has several highly critical vulnerabilities and we aren't able to update.

[dingjerry_FTNT]

Hi there,

Since you mentioned that there is no DAC with your FGT, it should be a different issue.

Please create a ticket and have it reviewed by TAC.

[kbusby]

Do you have an update on the status of your issue? I am going to be deploying a very similar topology using 601F's and I'm curious if I will run into the same problems using 7.4.9. 

[dasfliege]

Feedback from Fortinet was that we have to disable FEC on our switches, since disabling it on the Forti alone does not seem to work. We haven't had the chance to try the update again yet, but will schedule it in the next few weeks.

[HarryTran]

Hi @dasfliege 

What are your fiber modules and expected speed on the ports?
If you have available ticket number, please share it with me.