Last night I updated my Fortigate 80F from 6.4.8 to 6.4.9 and immediately lost connection to the LAN. I could still ping the Fortigate from the internet side, so on a hunch I checked the switch (a Unifi 24PoE) and noticed the port the 80F is plugged into was blocked. Disabling STP on the port makes everything work again. I'm not sure if it's a Ubiquiti problem or a Fortigate problem, but it had been running fine on 6.4.8 for months. There's only one connection between the 80F and the switch. RSTP priority on the switches is set to 4096 on the 24PoE and 8192 on a couple of downstream switches. I skimmed the release notes for 6.4.9 and nothing stood out that might cause this kind of issue...any ideas?
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Created on 05-08-2022 08:18 PM
Hello meliodes,
Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.
Thanks,
Fortinet Community Team
Created on 05-08-2022 10:04 PM
Hi meliodes,
That issue would require in-depth investigation, and that would be best for you to create a support ticket for that to know the root cause.
Hope this helps!
Regards
RJ
I have come across the same issue. Did you ever get this resolved?
This just took down our entire network. I can't find any mention of spanning tree in the release notes for 6.4.9, and a technical tip in 2020 claims that FortiGates don't participate in STP, but... apparently they do now? You can switch STP off on the FortiGate interface, and you should be back in business.
Hello @meliodes,
Please check if STP is enabled on the port that is connecting to Unifi switch.
config system interface
edit <interface_name>
show full | grep stp
If the above output shows STP is enabled, then this could be the reason that you lost access to the LAN.
@alifThe issue in this case is not that STP is enabled (obviously, it is for this issue to occur). The issue is that STP was enabled (no config change) in 6.4.8, and did not cause this issue. So something about the 6.4.9 release changed STP functionality, and I don't see anything documented in the release notes. I am unsure if STP was just broken in 6.4.8, and 6.4.9 fixed it, or if some other change adjusted how STP determines if it believes there's a loop.
Fortinet needs to identify and document the related change.
I did find an internal Engineering ticket that has a similar issue reported after firmware upgrade from 6.4.8 to 6.4.9. It's still being investigated and currently no fix is available.
I'm having this issue as well on 7.2.0
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1696 | |
1091 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.