Skip to main content
IrbkOrrum
Explorer III
October 25, 2024
Question

Best Practice for monitoring LACP interface

  • October 25, 2024
  • 1 reply
  • 1937 views

I've got an LACP connection from my HA pair of FortiGate 600f's to the rest of the environment.  There are 2 physical ports that are under the "LACP_Trunk" 802.3ad aggregate interface.  What's the best way to monitor these interfaces for HA failover?  Is it best to monitor Port1 and Port2 (which is the indication that I got from an article about Multicast https://community.fortinet.com/t5/FortiGate/Technical-Tip-Best-practice-HA-monitored-interface-configuration/ta-p/214928 ) or is it better to monitor the "LACP_Trunk" 802.3ad aggregate interface directly?
TIA!

1 reply

Toshi_Esumi
SuperUser
SuperUser
October 25, 2024

If you're not using the LACP interface to pass multicast packets, you need to ask a question to yourself which behavior of HA failover you want: Do you want it to failover when only one port goes down?
If your answer is yes, then monitor individual ports. If no because the link is still up and operational with half capacity, then you should monitor the agg interface.

Toshi

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.