Hey, We currently have VLAN interfaces assigned to ports directly. Now we'd like to create aggregate interfaces and assign the VLANs to those. It's an A-P HA pair. The way with the least downtime would be to backup the config, change with a text editor, and restore the edited config. Question 1: Would that be the preferred method or how would you go about this? Question 2: What if the edited configuration is invalid for whatever reason? Will it revert to the previously running config? How to have a way back? Thanks. Marki
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Yeah I guess it's back to editing text files.
What about the HA pair?
1) Create full backup of both devices
2) Change the same things in both backups
3) Restore the changed config to both devices (at the same time?)
?
That would be doable since you would have downtime. Just keep a snapshot of the before and after and ensure the script is good for creating the new LAG
Key items
>if you can start with fresh unused ports that would be a positive ( a port that has zero items attached to it ; no fwpolicy , ntp, fawners object, etc....)
> unix sed/vim subsitution or windows find+replace would help
> use the cli cmd diag sys checkuse system.interface.name portXXX to find all dependencies against the new and old port b4 for you start
ymmv but review and then review, at worst case if your migration fails you restore to your last known good and working cfg
Ken
PCNSE
NSE
StrongSwan
It (almost) worked. You have to rearrange the new config file such that the VLANs now attached to aggregates are defined AFTER the physical ports. The original order in the config file was: 1) Ports 2) VLANs 3) Aggregates Now you have to do: 1) Ports 2) VLANs on ports 3) Aggregates 4) VLANs on aggregates
Hello.
We have to do a similar change using Fortios 5.6.12. We have one vian interface assigned to one aggregate port and we want to move it to another aggregate port.
edit "old" set vdom "root" set allowaccess capwap set vlanforward enable set type aggregate set member "port13" "port14"
edit "new" set vdom "root" set allowaccess capwap set vlanforward enable set type aggregate set member "port11" "port12"
edit "VIDxxx" set vdom "root" set ip 1.2.3.4 255.255.255.240 set allowaccess ping capwap set vlanforward enable set scan-botnet-connections monitor set interface "old" set vlanid xxx next
Can we just use the command set interface "new" while normal operation or do we need to edit the backup config file and restore it?
Thanks
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1696 | |
1092 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.