In a new customer's network I have found the following scenario:
- Fortigate 1 and 2 form and HA cluster in active-passive mode. The HA link is just a cable connecting them directly.
- Racks A and B are a several meters apart and cables between them run through the ceiling. It is not possible to follow them and they are not identified: no pannels, no labels, ...
- Port 1 of each Fortigate is connected to a switch but customer doesn't know the switch ports.
- All switch ports are access ports in the default VLAN. Fortigate port 1 is default gateway for the subnet associated to this VLAN
In order to locate the switch ports, I considered connecting my PC in one switch, setting up an address of the subnet and ping the default gateway. Then check ARP looking for the MAC address of the default gateway and finally search for this MAC address in the CAM of both switches. However, I realized this will make me discover only the switch port connected to the active Fortigate unit.
Is there a way to track down the switch port connected to the passive Fortigate unit, without disconnecting the cable on firewall side, neither forcing a transition of the cluster active unit?