B&B Bezpieczeństwo w biznesie
  • Start
  • O nas
  • Produkty
  • Usługi
    • Szkolenia
    • Audyt konfiguracji Fortigate
    • Prezentacje
  • Blog techniczny
  • Pomoc
  • Kariera
  • RODO
  • Kontakt

Producent oprogramowania Fortinet opublikował aktualizację dla produktu FortiSwitch o numerze wersji 6.4.6. W najnowszej wersji naprawiono błędy zbyt wysokiego użycia  mocy obliczeniowej przez procesy działające w tle. Rozwiązano również problem z MCLAG ICL, który był w pełni podłączony, ruch między niektórymi sieciami VLAN był zrywany. Jednym z poważniejszych błędów przy zarządzanym FortiSwitchu był błąd w wersji 6.4.5, który skutkował niedziałającymi polisami NAC, w najnowszej wersji został on naprawiony. Więcej ciekawych informacji w dalszej części artykułu.

Wspierane modele:

FortiSwitch 1xx: FS-108E, FS-108E-POE, FS-108E-FPOE, FS-124E, FS-124E-POE, FS-124EFPOE, FS-124F, FS-124F-POE, FS-124F-FPOE, FS-148E, FS-148E-POE, FS148F, FS-148F-POE, FS-148F-FPOE

FortiSwitch 2xx: FS-224D-FPOE, FS-224E, FS-224E-POE, FS-248D, FS-248E-POE, FS-248EFPOE

FortiSwitch 4xx: FS-424D, FS-424D-FPOE, FS-424D-POE, FS-424E, FS-424E-POE, FS-424EFPOE, FS-424E-Fiber, FS-M426E-FPOE, FS-448D, FS-448D-FPOE, FS-448DPOE, FS-448E, FS-448E-POE, FS-448E-FPOE FortiSwitch 5xx: FS-524D-FPOE, FS-524D, FS-548D, FS-548D-FPOE

FortiSwitch 1xxx: FS-1024D, FS-1048D, FS-1048E

FortiSwitch 3xxx: FS-3032D, FS-3032E

FortiSwitch Rugged: FSR-112D-POE, FSR-124D

Co nowego:

FortiSwitchOS obsługuje teraz 28 grup agregacji łączy (LAG) w modelach FS-124F i 52 LAG w modelach FS148F.

Rozwiązane problemy:

Bug ID Description
488900 Background tasks use too much processing power.
683831 The daemon for 802.1x port-based authentication occasionally crashes on the FS-448DFPOE model.
684986 When the MCLAG ICL is fully connected, traffic between some VLANs is lost.
685954 The browser-based CLI console becomes unresponsive when a language like Japanese,
Korean, or Chinese is configured.
687698,
688624
After the managed FortiSwitch unit was upgraded to 6.4.5, NAC policies no longer work.
687889 Remotely logging in does not work when a trusted host is configured as the remote-lognin
user for FortiSwitch Cloud.
689572 There are intermittent ping drops when the CPU usage rises to 93 percent.

Znane problemy do rozwiązania:

Bug ID Description
382518, 417024,
417073, 417099,
438441
DHCP snooping and dynamic ARP inspection (DAI) do not work with private VLANs
(PVLANs).
414972 IGMP snooping might not work correctly when used with 802.1x Dynamic VLAN
functionality.
480605 When DHCP snooping is enabled on the FSR-112D-POE, the switched virtual interface (SVI) cannot get the IP address from the DHCP server. Workarounds: —Use a static IP address in the SVI when DHCP snooping is enabled on that VLAN. —Temporarily disable dhcp-snooping on vlan, issue the execute interface dhcpclient-renew command to renew the IP address. After the SVI gets the IP address from the DHCP server, you can enable DHCP snooping.
510943 The time-domain reflectometer (TDR) function (cable diagnostics feature) reports unexpected values. Workaround: When using the cable diagnostics feature on a port (with the diagnose switch physical-ports cable-diag CLI command), ensure that the physical link on its neighbor port is down. You can disable the neighbor ports or physically remove the cables.
520954 When a “FortiLink mode over a layer-3 network” topology has been configured, the
FortiGate GUI does not always display the complete network.
542031 For the 5xx switches, the diagnose switch physical-ports led-flash
command flashes only the SFP port LEDs, instead of all the port LEDs.
548783 Some models support setting the mirror destination to “internal.” This is intended
only for debugging purposes and might prevent critical protocols from operating on
ports being used as mirror sources.
572052 Backup files from FortiSwitchOS 3.x that have 16-character-long passwords fail
when restored on FortiSwitchOS 6.x. In FortiSwitchOS 6.x, file backups fail with
passwords longer than 15 characters.
Workaround: Use passwords with a maximum of 15 characters for FortiSwitchOS
3.x and 6.x.
585550 When packet sampling is enabled on an interface, packets that should be dropped
by uRPF will be forwarded.
606044 The value for cable length is wrong when running cable diagnostics on the FS108E, FS-124E, FS-108E-POE, FS-108E-FPOE, FS-124E-POE, FS-124E-FPOE,
FS-148E, and FS-148E-POE models.
609375 The FortiSwitchOS supports four priority levels (critical, high, medium, and low);
however, The SNMP Power Ethernet MIB only supports three levels. To support
the MIB, a power priority of medium is returned as low for the PoE MIB.
610149 The results are inaccurate for open and short cables when running cable
diagnostics on the FS-108E, FS-124E, FS-108E-POE, FS-108E-FPOE, FS-124EPOE, FS-124E-FPOE, FS-148E, and FS-148E-POE models
617755 The internal interface cannot obtain IPv6 addresses with dhcpv6-snooping enabled
on the native VLAN.
673433 Some 7-meter DAC cables cause traffic loss for the FS- 448E model.
682442 Do not use FCLF8521P2BTL and FCLF852XP2BTL modules. They are not
supported and can cause issues on the FortiSwitch unit. To find supported
modules, refer to the FortiSwitch-Compatible Transceivers matrix

Notatki producenta: FortiSwitch 6.4.6

Pozdrawiamy,

Zespół B&B
Bezpieczeństwo w biznesie

 

Post Views: 91

6.4.6 FortiSwitch FortiSwitch 6.4.6 FSW

Poprzedni wpisFortiClient 6.4.3Następny artykuł ESET PROTECT 8.0.19 I ESET PROTECT 2.1.0

Najnowsze

FortiAP 6.4.55 marca 2021
F-Secure Email and Server Security 15.0025 lutego 2021
FortiManager 6.4.523 lutego 2021

Kategorie

  • Aktualności
  • Bez kategorii
  • ESET
  • F-Secure
  • FortiAnalyzer
  • FortiAP
  • FortiAuthenticator
  • FortiClient
  • FORTIGATE
  • FORTIMAIL
  • FortiManager
  • FortiNAC
  • FORTISWITCH
  • FortiWeb
  • Qnap
  • Szkolenia
  • Veeam
  • VMware

Tagi

5.4.7 5.4.12 5.6.9 6.0.6 6.0.10 6.2.0 6.2.1 6.2.2 6.2.5 6.2.7 6.4.0 6.4.1 6.4.2 6.4.3 6.4.4 6.4.5 acronis acronis backup 12.5 Akademia BB Eset eset endpoint antivirus eset endpoint security F-Secure f-secure client security F-Secure Email and Server Security f-secure policy manager forti analyzer FortiAnalyzer FortiAP fortiap-s fortiap-w2 FortiAuthenticator FortiClient FortiClientEMS FortiGate FortiMail FortiManager Fortinet FortiOS FortiSwitch FortiWeb trening VMware vmware vcenter vmware vcenter server 7

MENU

  • Start
  • O nas
  • Produkty
  • Usługi
    • Szkolenia
    • Audyt konfiguracji Fortigate
    • Prezentacje
  • Blog techniczny
  • Pomoc
  • Kariera
  • RODO
  • Kontakt

BLOG TECHNICZNY

FortiAP 6.4.55 marca 2021
F-Secure Email and Server Security 15.0025 lutego 2021
FortiManager 6.4.523 lutego 2021

KONTAKT

+48 500-413-313
biuro@b-and-b.plhttps://www.b-and-b.pl
8:00-16:00
BEZPIECZEŃSTWO W BIZNESIE 2020 - wszystkie prawa zastrzeżone

MENU

  • Start
  • O nas
  • Produkty
  • Usługi
    • Szkolenia
    • Audyt konfiguracji Fortigate
    • Prezentacje
  • Blog techniczny
  • Pomoc
  • Kariera
  • RODO
  • Kontakt

BLOG TECHNICZNY

FortiAP 6.4.55 marca 2021
F-Secure Email and Server Security 15.0025 lutego 2021
FortiManager 6.4.523 lutego 2021

Kontakt

+48 500-413-313
biuro@b-and-b.pl
8:00-16:00