Skip to main content
capricorn80
capricorn80
New Member
October 31, 2018
Question

Fortigate and Cisco switch LACP not working

  • October 31, 2018
  • 1 reply
  • 13970 views

Hi!

 

I am testing topology where fortigate connected to switch.

Config onFortigate.

edit "LAN" set vdom "root" set allowaccess ping set type aggregate set member "port2" "port3" set role lan set snmp-index 12 set lacp-mode static

 

Cisco Switch

 

interface Ethernet0/2 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode active

 

interface Ethernet0/3 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode active

 

interface Port-channel1 switchport switchport trunk encapsulation dot1q switchport mode trunk

 

Output on Cisco

Group Port-channel Protocol            Ports ------+-------------+-----------+----------------------------------------------- 1 Po1(SD)                LACP                Et0/2(s) Et0/3(s)

 

Fortigate:

 

diagnose netlink aggregate name LAN status: up ports: 2 link-up-delay: 50ms min-links: 1 ha: backup distribution algorithm: L4 LACP mode: static

slave: port2 link status: up link failure count: 0 permanent MAC addr: 00:0c:29:4d:df:96

slave: port3 link status: up link failure count: 0 permanent MAC addr: 00:0c:29:4d:df:a0

 

diagnose sniffer packet LAN

 

5.963232 802.1Q vlan#1 P0

 

Any help in this case?

 

 

    1 reply

    ebakke84
    ebakke84
    New Member
    October 31, 2018

    have you tested lacp mode active ?

    capricorn80
    capricorn80Author
    New Member
    October 31, 2018

    Even thought I set the command to active it doesnt show up so that means by default its active. which was like this when I started it and then I found in the doc to use passive. Still does work. I created another LACP with another switch and that does work so something wrong on Fortigate.

     

    edit "LAN" set vdom "root" set allowaccess ping set type aggregate set member "port2" "port3" set role lan set snmp-index 12

    ebakke84
    ebakke84
    New Member
    October 31, 2018

    what type of cisco switch do you have?

    make sure you not using a 10gig only interface on cisco if you not have a fortigate with 10gig interface. 

     

    have you tested: set lacp-speed slow ?

    Terms & ConditionsAccessibility statement