When I create L4-L7 device in tenant mgmt, the status of the device is "init" in APIC.

Kuen-Yi Lin · ‎08-18-2016

Hi! When I create L4-L7 device in tenant mgmt, the status of the device is "init". I use Fortigate VM 5.4.1 for this lab.

I can ping Foritgate VM (172.20.9.30) from APIC (172.20.9.17).

I use http 80 for mgmt of Fortigate VM.

I can use my laptop to telnet port 80 of Fortigate VM and My laptop is in the different network segment.

So, I think the mgmt of Fortigate VM is fine. And I can config with GUI through port 80 of Fortigate VM.

I attach the two pictures. One is for my config information, apic_l4l7createdevice.jpg. The other is for the error log of APIC, apic_l4l7createdevice_faultinfor.jpg.

From the error log, It means APIC can't connect to Foritgate VM. I provide the ping log form APIC to Fortigate VM.

Log of ping

login as: admin
Application Policy Infrastructure Controller
admin@172.20.9.17's password:
apic1# ping 172.20.9.30
PING 172.20.9.30 (172.20.9.30) 56(84) bytes of data.
64 bytes from 172.20.9.30: icmp_seq=1 ttl=255 time=1.07 ms
64 bytes from 172.20.9.30: icmp_seq=2 ttl=255 time=0.625 ms
64 bytes from 172.20.9.30: icmp_seq=3 ttl=255 time=0.519 ms
64 bytes from 172.20.9.30: icmp_seq=4 ttl=255 time=0.503 ms
64 bytes from 172.20.9.30: icmp_seq=5 ttl=255 time=0.485 ms
^C
--- 172.20.9.30 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4165ms
rtt min/avg/max/mdev = 0.485/0.641/1.074/0.222 ms
apic1#

I don't know what I lose, so I can't let the device be in status "stable".

Thank your support.

dpita · ‎08-19-2016

Hello

Thanks for using SupportForums!

Could you possibly try the same tests but on all three APICs?

Kuen-Yi Lin · ‎08-19-2016

Hi dpita:

Thank your reply. This is a LAB. So, we just buy one APIC controller, one Spine switch, and two Leaf switches. When I init the APIC and ACI Fabric, I config one APIC for this ACI Fabric. I don't config the standard three APIC controllers.