Troubleshooting
Troubleshooting FortiLink issues
If the FortiGate does not establish the FortiLink connection with the FortiSwitch, perform the following troubleshooting checks.
Check the FortiGate configuration
To use the FortiGate GUI to check the FortiLink interface configuration:
- In Network > Interfaces, double-click the interface used for FortiLink.
- Ensure that Dedicated to FortiSwitch is set for this interface.
To use the FortiGate CLI to verify that you have configured the DHCP and NTP settings correctly:
- Verify that the NTP server is enabled and that the FortiLink interface has been added to the list:
show system ntp
- Ensure that the DHCP server on the Fortilink interface is configured correctly:
show system dhcp
Check the FortiSwitch configuration
To use FortiSwitch CLI commands to check the FortiSwitch configuration:
- Verify that the switch system time matches the time on the FortiGate:
get system status
- Verify that FortiGate has sent an IP address to the FortiSwitch (anticipate an IP address in the range 169.254.x.x):
get system interfaces
- Verify that you can ping the FortiGate IP address:
exec ping x.x.x.x
To use FortiGate CLI commands to check the FortiSwitch configuration:
- Verify that the connections from the FortiGate to the FortiSwitch units are up:
exec switch-controller get-conn-status
- Verify that ports for a specific FortiSwitch stack are connected to the correct locations:
exec switch-controller get-physical-conn <FortiSwitch-Stack-ID>
- Verify that all the ports for a specific FortiSwitch are up:
exec switch-controller get-conn-status <FortiSwitch-device-ID>
Check FortiSwitch connections
Use the following CLI command for detailed diagnostic information on the managed FortiSwitch connections: execute switch-controller diagnose-connection <FortiSwitch_serial_number>
If the FortiSwitch serial number is omitted, only the FortiLink configuration is checked.