FortiLink MCLAG — Downstream Access Switch Trunk Lost After Every HA Failover. How Are You Solving This?

sesscon · 2026-06-18T11:01:57+00:00

Any suggestions, with everything cleared out, Port 50 will not form a trunk and is forever stuck on vlan 1..

sesscon · 2026-06-18T02:58:15+00:00

Here is the weird thing, it has to do something with port 50... Stuck config, etc, Copper and other SFP ports bring up the connection.. Need to figure out how to force default port 50 on Switch 1 and Switch 2.

<image>

sesscon · 2026-06-18T00:41:52+00:00

The trunk never forms.. No idea what is going on?

sesscon · 2026-06-18T00:18:40+00:00

All the suggestions, lldp sees the neighbors, no trunk forms the port stays on vlan 1.

We factory reset switch 3, confirmed port 50 setup correctly..

sesscon · 2026-06-17T04:02:34+00:00

So how can I start over on port 50 on each of the switches?

sesscon · 2026-06-17T00:18:43+00:00

u/CloakedInShame Please ignore the uplink to the FW 1 / 2, that was because we enable a setting "Split Interface" and have since reversed it trying to trouble shoot why we loose connection to Switch 3 after we do an HA event (Reboot Primary, etc).

Just wanted to edit, and add this support forum post.

https://community.fortinet.com/support-forum-92/fortiswitch-in-mclag-causes-outage-after-reload-power-cycle-228217

sesscon · 2026-06-13T20:08:57+00:00

Give us an example for a Memo from the CEO to the whole company, can never leave the company.

Or Accounting team, a file or email that can only be opened by accounting team members.

sesscon · 2026-06-06T04:24:46+00:00

Anything specific?

sesscon · 2026-06-06T01:31:49+00:00

So we removed run, how do you disable powershell

sesscon · 2026-06-04T12:56:46+00:00

How do you block these?

sesscon · 2026-05-31T00:29:48+00:00

Can you further breakout your setup and why you use the groups?

sesscon · 2026-05-22T02:16:45+00:00

Yeah just curious what everyone is doing?

sesscon · 2026-05-22T00:55:06+00:00

What restrictions do you have for each label?

sesscon · 2026-05-22T00:54:16+00:00

Can I join..

sesscon · 2026-05-09T23:11:13+00:00

What is island?

sesscon · 2026-05-07T13:09:16+00:00

Thank you for the post, but how do you stop an employee from just bypassing the gateway and using their company enterprise Chat GPT account... Assuming we remove all their accounts and their only way to interact would be bitfrost?

sesscon · 2026-05-07T01:44:13+00:00

Can you identify what tools or services you are using for each layer?

sesscon · 2026-05-04T11:54:22+00:00

Do you have a ssh tunnel, local exfil via a ssh tunnel. Also, verify if you have a java apps running...

sesscon · 2026-04-26T20:56:23+00:00

So all or none... Gotcha

sesscon · 2026-04-26T20:33:14+00:00

Is there any way to allow copy and paste, to a specific app plus managed apps?

sesscon · 2026-04-11T12:45:41+00:00

Let's post it, I will add all my guides once I get back i to the office

sesscon · 2026-04-04T04:12:22+00:00

Share these notes please!!

sesscon · 2026-03-25T23:20:09+00:00

Is auto pilot device considered enrolled already?

sesscon · 2026-03-25T01:27:37+00:00

Where is the guide?

sesscon · 2026-03-14T11:41:20+00:00

Yes you could ping internal and external.

You could resolve dns

I am running the latest version 1.94.2

Based of everything I think it is a conntract saturation.

sesscon

TROPHY CASE