Skip to main content
pkm
Visitor III
Jan 24, 2025 10:40 AM UTC
Question

fortilink split-interface priority

Hello Community

 

In a FortiLink split-interface setup, how can i decide, which interface should be prefered?

 

Background

100F Cluster

Interface x1 and x2 belong to FortiLink Agg Interface

x1 goes to 1024E "Core-Main"

x2 goes to FSW1xxF Series Switch "Core-Backup"

 

From 1024E "Core-Main" we go to each access switch (hub & Spoke setup)

From 1xx "Core-Backup" we go to access switch-1 then switch-2, switch-3, switch-n

By this, if 1024 should be offline or damaged, we still have each access switch somehow connected to the firewall and can provide services. we do have a massive impact on bandwith within the network, but it works unit one can replace the hardware)

 

Initialy I had the idea to use a hardware switch on the fortigate, but we need block-intra-vlan and other features, that are not supportet on a switch on the FGT

 

A second 1024 is in budget for 2026, since then we have to work with the above setup.

So this i why I have to rely on split-interface active, and "need" to prioritze FGT's x1 Interface

 

 

 

 

According to the cli reference of 7.2.10 there is a command "fortilink-backup-link <integer>" but my fortigate does not know about this command 

 

Any ideas?

 

/BR

Philippe

5 replies

Anthony_E
Staff
Staff
Jan 27, 2025 5:25 AM UTC

Hello Philippe,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Translate
Best Regards
AEK
SuperUser
SuperUser
Jan 27, 2025 8:57 AM UTC

Hi Philippe

I noticed on my FGT the parameter "priority" which is present only on network ports that are part of a FortiLink. I found this parameter is not well documented, and I didn't have the chance to test it, but I think it is worth testing.

Translate
AEK
pkm
pkmAuthor
Visitor III
Jan 27, 2025 1:11 PM UTC

Hello AEK

According to the info I found so far, this priority setting is used for routing purposes e.g. route priority

I was using this setting as well but it did not have any impact. I'll test it more within the next few days

 

 

Translate
AEK
SuperUser
SuperUser
Jan 27, 2025 1:24 PM UTC

Hi PKM

In that case I wonder why this "priority" setting is only available for interfaces that are part of FortiLink?

Translate
AEK
Risk and Resilience in the Age of AI. An OT Thought Leadership Summit for Houston's Critical Infrastructure Leaders. Date: Thursday, December 3, 2026. Time: 8:30 am - 1:30 pm (CT). Location: The Westin Houston, Memorial City | 945 Gessner Road, Houston, TX 77024