using cat93k to split wan connection and getting high packet loss

[nflnetwork]

hi we are splitting an ISP wan connection into a firewall and using 3 ports on the cisco cat93k .

ports 46,47,48

i have the 3 ports in access mode on vlan 100

spanning tree portfast

unfortunately the wan connection is not usable. seeing large packet loss.

if i move these 3 connections into a $100 netgear switch it works flawlessly.

what am i missing on the cisco?

we are doing this because the firewall is 2 units in HA mode and i needed to split the WAN connection . Pretty standard .

[balaji.bandi]

We need more information, where the packet Loss occuring. while leaving the Switch or FW ?

Can you provide configuration and example here ? along with your FW connection, what FW is this ?

as per my understanding here, switch is only Layer 2 simple access VLAN forwarding the Traffic to FW to take decision to split between ISP i guess here.

i only see here there may be some speed negotiation between Switch and FW or some missing config here.

wait for your inputs to understand more better.

[nflnetwork]

We need more information, where the packet Loss occuring. while leaving the Switch or FW ?
i am pinging the wan IP address, packet loss is on traffic coming in

Can you provide configuration and example here ? along with your FW connection, what FW is this ?
fortigate 200, cisco is only being used as a splitter


as per my understanding here, switch is only Layer 2 simple access VLAN forwarding the Traffic to FW to take decision to split between ISP i guess here.

correct

i only see here there may be some speed negotiation between Switch and FW or some missing config here.

everything is set to auto

[balaji.bandi]

i am pinging the wan IP address, packet loss is on traffic coming in

BB - WAN IP outside Fortigate (internet ) or is this IP configured on fotigate ?

can show output of packet loss ? - Fortigate is HA Mode right ? HA need Sync Link - how is HA connection ? what VLAN is this ?

[nflnetwork]

WAN interface on the firewall.

[nflnetwork]

i see this in the logs

*May 3 21:19:05.809: %SW_MATM-4-MACFLAP_NOTIF: Host 0009.0f09.0002 in vlan 97 is flapping between port Te4/0/46 and port Te4/0/47

[balaji.bandi]

We only know Limited information as of now, as per your message you have only VLAN 100, now we see VLAN 97.

( I  advise you to post the Switch configuration)

*May 3 21:19:05.809: %SW_MATM-4-MACFLAP_NOTIF: Host 0009.0f09.0002 in vlan 97 is flapping between port Te4/0/46 and port Te4/0/47

Some recomendation to fix the issue :

1. find out that MAC Address belong to what device ?

2. Make sure you seperate the HA SYNC  Links Data VLAN for best practive.