Nexus ports down

[shaikh.zaid22]

We have a fortigate firewall which has 2 ports connected to cisco catalyst switch as PO.

2 ports connected to 2 different cisco nexus 9300 sw

2 ports to cisco 9200 switch.

Now, we got a new firewall, as soon as we unplugged the cables and connected to new firewall unit we are seeing ports connected to Nexus port 48 on both switch is Down.

However, other ports connected to catalyst and access sws are up and running.

I tried toggling the Nx sw ports and restarted the firewall as well but of no use.

So, just wanted to know as i have experienced in past sometimes Nx sw ports required to re-configure.

Note: Nexus ports are 25G ports.

Need suggestions

[shaikh.zaid22 · Accepted solution]

M02@rt37 Thanks...

yesterday when i visited the interface settings for Nexus it was OFF. Just to give you some more context, actually the Fortigate is RMAed and it shipped with v7.0.9 Mature version. But, the active one to which i want to join in HA has v7.4.2, hence before moving into cluster i upgraded to 7.4.2 and joined it. so i have to go through the defective fgt interface settings.

However, looking at the nexus interface config which is "FEC-OFF" and the article share by @marce1000 https://community.fortinet.com/t5/FortiGate/Technical-Tip-Changes-in-Forward-Error-Correct-FEC-settings/ta-p/231356

Highlights under Scope section that FGTs 40G interfaces are by default set to "CL91-rs-Fec", hence i can theoretically confirm that there is a MISMATCH (Nexus = FEC-OFF & FGT = CL91-rs-fec").

[marce1000]

  - @shaikh.zaid22   So that means you have to figure a way to get the 'same FECs' 

  M.

[shaikh.zaid22 · Accepted solution]

Guys,

By disabling the fec feature in fortigate made the Ports go UP 

Thanks all for the contribution... Great work

[M02@rt37]

OK.

Take care v7.4.2 fortios is a feature not mature version...

[shaikh.zaid22]

M02@rt37 yes its a feature release.. i was referring v7.0.9 as Mature...