Technical Tip: Changing interface type from 'Redundant' to 'Aggregate'

It is not possible to change an interface type after creation from the GUI or CLI in FortiGate.

The interface can be deleted and recreated, but this may be a time-consuming task if the interface has are many references and dependencies.

config system interface
    edit "INT-TST"
        set vdom "root"
        set type redundant
        set member "port6" "port7" "port8" "port9" "port10"
    next
end

Instead of deleting and recreating the interface, the type can be changed by loading a modified configuration backup, but this requires downtime and should be considered a maintenance task. As part of restoring the configuration, the unit will reboot. Reboot times are platform-dependent.

1. Download the current configuration file and save it.

2. Change the configuration manually by opening the config file in a text editor such as Notepad.

config system interface
    edit "INT-TST"
        set vdom "root"
        set type aggregate
        set member "port6" "port7" "port8" "port9" "port10"
    next
end

3. Upload the modified configuration file to FortiGate. Note this will cause the firewall and any connected HA cluster members to reboot.
   
   

   

    

4. Once uploaded successfully, the configuration will be changed, and the interface type will be set as aggregate.

    

   

Related articles:

Technical Tip: Interface type which can be member of LACP

Technical Tip: Link aggregation limitation and maximum supported number of interfaces
Technical Tip: Unable to change IPsec tunnel type and getting the -9999 error