Skip to main content
Jin-Gyu
Explorer
May 29, 2025
Solved

How to work LACP static mode in Fortigate

Good morning!

 

How does static mode work in LACP on Fortigate?
As far as I know, Fortigate don't send lacp messages in static mode,

so how can I communicate in a static-static configuration?

 

Thank you

Yurisk
YuriskAnswer
SuperUser
May 29, 2025

For all others reading this post, to prevent confusion - there is no such thing "static LACP" in Fortigate (or anywhere for that matter), only, as @kaman pointed "active" or "passive", "static" (confusingly also named as a lacp mode) means do aggregate interfaces but disable LACP completely on them.

yurisk.info - all things Fortinet blog, no ads

5 replies

kaman
Staff
Staff
May 29, 2025

Hi Jin-Gyu,

LACP offers two dynamic modes, "active" and "passive," which use LACP messages to negotiate and form an aggregate link.

When a FortiGate is configured with "static" LACP mode, the interface acts as a simple trunk, and all ports in the LAG will participate in traffic transmission. This means that if the FortiGate has "static" LACP mode enabled and a peer device also has LACP enabled (active or passive), the connection will not come up, as LACP negotiation is not occurring.

The "static" mode is often used when a peer device on the other end of the LACP link does not support LACP or when you want to force a specific set of ports into the LAG without relying on LACP negotiation. For example, when connecting two FortiGate units in an LACP configuration, you might choose "static" mode if LACP is not needed between them.

Please refer to the documents below for more information:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Initial-troubleshooting-steps-for-LACP-Link/ta-p/198339

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-and-FortiOS-support-for-802-3ad-LACP/ta-p/197941#:~:text=If%20you%20are%20creating%20an%20aggregate%20between,you%20can%20turn%20LACP%20off%20(lacp%2Dmode%20static).&text=SNMP%20reports%20the%20trunk's%20speed%20as%20the,has%20a%20reported%20speed%20of%20300%20M/s).


https://docs.fortinet.com/document/fortiswitch-manager/7.2.3/administration-guide/801170/adding-802-3ad-link-aggregation-groups-trunks

If you have found a solution, please like and accept it to make it easily accessible to others.

Regards,
Aman

Jin-Gyu
Jin-GyuAuthor
Explorer
May 29, 2025

Thank you for your kind answer.
Can I ask you one more question?
If use lacp-mode static because the peer equipment does not support lacp, it seems similar to use h/w switch or s/w switch instead of LAG. Is there a reason why fortigate exist lacp-mode static?

I'm sorry for bothering you.스크린샷 2025-05-29 225424.png

Yurisk
SuperUser
YuriskAnswer
SuperUser
May 29, 2025

For all others reading this post, to prevent confusion - there is no such thing "static LACP" in Fortigate (or anywhere for that matter), only, as @kaman pointed "active" or "passive", "static" (confusingly also named as a lacp mode) means do aggregate interfaces but disable LACP completely on them.

yurisk.info - all things Fortinet blog, no ads
Jin-Gyu
Jin-GyuAuthor
Explorer
May 29, 2025

Thank you for answer. 

I misunderstood because it was in the same 'set lacp-mode'.

Yurisk
SuperUser
SuperUser
May 29, 2025

Yes, it is indeed confusing they (Fortinet) list it as a kind of LACP mode when they mean to disable LACP altogether. 

yurisk.info - all things Fortinet blog, no ads
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT