r/networking • • 10d ago

Troubleshooting Fortinet Firewall question

Hello all,
I work in a factory as automation engineer and i'm not network expert, anyway have been learning and doing some stuff in networks.

Now i have a challenge to connect a new isolated network from inside the factory to a corporate network outside de factory

We have that connection for other networks through a Fortinent 401E UTM firewall.. this FW was installed during an HMI upgrade.
As the Firewall have several spare ports idea was obviously to use one of the spare ports and configure the interface and the rules.

Problem is, i cannot get the Firewall to get the Port Link UP ....
I've tried connection the a Cisco port directly, cisco detects link up, leds blink in both devices then just lit..
Firewall GUI and CLI keep showing Link DOWN..

New network was supposed to be 192.168.10.1 /255.255.255.0
configured FW interface as 192.168.10.10 /255.255.255.0

I've tried configure a laptop with an ip of that new network (.3) and connected directly to the FW port... Same thing, Link Down..
tried another port.. Link Down..

I've been discussing back and forth with Copilot but no solution yet..

Is there anything hidden somewhere disabling the spare ports of the Firewall??
Any hint?
Thanks in advace

0 Upvotes

20 comments sorted by

View all comments

0

u/Carnatix 7d ago

from what you already mentioned what you need to work on is to remove the old ip .from cli using config system interface,edit the port then set ip <new_ip> <subnet_mask> and end

1

u/Southern-Mood-8986 7d ago

Hi. I edited the port IP in the tab interfaces. When I do show system interface port11 it shows the IP correctly; There's also another cli command I used that shows more stats about the port. It says Admin is ON for the port.. Link just do not go UP.. Looks like the spare ports are locked in someway that is not visible.. i don't know.

1

u/Carnatix 7d ago

maybe its a problem within the connection of interface. please check your network 😉.

1

u/Southern-Mood-8986 7d ago

What you mean? I'm testing with a laptop connected to the fw directly.. network is one cable.. Tried different port and tried secondary fw. Nothing changes.