Unable VLANs allowed after Upgrade firmware Fortios 7.6.0 - 7.6.3

[nebredav]

After upgrading the firmware FortiOS Fortigate 60F from version 7.4.7 to 7.6.0, only the native VLAN is available for use. Allowed VLANs no longer function on the FortiSwitch ports.

Ports with two "Allowed VLANs" configured are not working or are unavailable. Only the "Native VLAN" works.

Later versions 7.6.1, 7.6.2, 7.6.3 don't fix it.

I have to downgrade  to firmware version 7.4.7 for it to work successfully.

I will wait for a correction to that Bug.

[knaveenkumar]

Hi team ,

we see that in 7.6.1 and 7.6.2 some know issue for vlan are below:

===========================================================

in 76.1 we see that After a firmware upgrade, some vlan interfaces attached to a LAG interface are not displayed in the GUI.

Also, 7.6.2 After a firmware upgrade, the VLAN interface used in IPsec, SSL VPN, or SD-WAN is not displayed in the interface list or SD-WAN page and cannot be configured in the GUI.

[nebredav]

Example: You have two devices connected to port 1 of the Fortiswitch, with different VLANs. The PC VLAN 10 is connected to the IP Phone VLAN 20, and the IP Phone is connected to port 1. If the native VLAN is VLAN 10, then VLAN 10 works, and the other VLAN is disabled and not allowed. This is an error. It works up to firmware version 7.4.7.

[HarryTran]

I will reproduce in our lab.

[nebredav]

Example: You have two devices connected to port 1 of the Fortiswitch, with different VLANs. The PC VLAN 10 is connected to the IP Phone VLAN 20, and the IP Phone is connected to port 1. If the native VLAN is VLAN 10, then VLAN 10 works, and the other VLAN is disabled and not allowed. This is an error. It works up to firmware version 7.4.7.

[HarryTran]

Thanks for your further detail!

[HarryTran]

Hi @nebredav ,
The issue does not appear in my test. Could you share me the config of port1 of the Fortiswitch? what is the switch model and OS version ? (#get system status)
Thanks,
Harry

[nebredav]

FortiSwicth Firmware version 7.6.2  when upgrade Fortigate to firmware version 7.6.0 the user admin fail, I can't log in, a message appears "Invalid password"  It seems to overwrite several settings. It happens when upgrading from version 7.4.8 to version 7.6.0

[nebredav]

The firmware should not change port settings or passwords or profiles.

[nebredav]

You probably don't have a VPN connecting point-to-point Fortigate to Fortigate with a port configured with two VLANs. VLANs on switches with only one Fortigate work perfectly. But only native VLANs on the switches work through a VPN.