Link aggregation in Transparent mode

Hi all,

Does anyone who has experience in building Link aggregation in Transparent mode?

I have a scenario like below

The Firewall in pic works in transparent mode with policy permit any to any.

As the pic, port17&port18,port19&port20 are two different link aggregation interface running in active-passive mode with Cisco switch.

And I used port-pair in those two link aggregation interface.

In this scenario I ping 10.10.20.14 from 10.10.20.1, failed.

But it's wired that if I untied the link aggregation , and used port-pair "port17-port19" and "port18-port20".

I can ping between two IPs in pic.

I doubt that something wrong when I setting link aggregation in transparent.

Is there any point I need to notice setting link aggregation in transparent mode?

I find out some command on website,and I post the result below:

FW1 (CR_test) # diag netlink aggregate name cr_vlan100 

status: up

npu: y flush: n asic helper: y oid: 145 ports: 2 ha: master distribution algorithm: L4 LACP mode: passive LACP speed: slow LACP HA: enable aggregator ID: 2

slave: port17 link status: up link failure count: 0 LACP state: established actor state: PSAIEE actor port number/key/priority: 1 17 255 partner state: ASAIEE partner port number/key/priority: 274 3 32768 aggregator ID: 2 speed/duplex: 1000 1 RX state: CURRENT 6 MUX state: COLLECTING_DISTRIBUTING 4

slave: port18 link status: up link failure count: 0 LACP state: established actor state: PSAIEE actor port number/key/priority: 2 17 255 partner state: ASAIEE partner port number/key/priority: 276 3 32768 aggregator ID: 2 speed/duplex: 1000 1 RX state: CURRENT 6 MUX state: COLLECTING_DISTRIBUTING 4

I think my link aggregation most be up in this result,but the network still no work.

Please help,thanks!