Skip to main content
cybernet2025
Explorer III
March 29, 2023
Question

FG HA LACP Switch clustering.

  • March 29, 2023
  • 3 replies
  • 2139 views
 

I'd like to know what is the best practice for FG HA Switch clustering.
How can I configure the LACP on switch with separate LACP group (Solution A)  or I can configure the same LACP group (Solution B) .

PS. Switch is a Cisco CoreSwitch and connected the LAN network.

 

FG.jpg

 

 

3 replies

Toshi_Esumi
SuperUser
SuperUser
March 29, 2023

I don't think Solution B would work. One FGT needs to terminate all LAG/LACP members from the switch.

 

Toshi

cybernet2025
Explorer III
March 31, 2023

Can we configure this command?
config system interface
    edit port1_port2
        set lacp-ha-slave disable
    next

end

Toshi_Esumi
SuperUser
SuperUser
March 31, 2023

https://community.fortinet.com/t5/FortiGate/Technical-Tip-LACP-behavior-in-an-HA-cluster/ta-p/195163

 

Ok, I didn't know it's possible. I don't see much benefit of it though compared to have two separate LAGs and the switch distributes the same set of VLANs to both LAGs.

 

Toshi

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT