Skip to main content
DrKranio
New Member
August 25, 2025
Solved

MCLAG and fortlink configuration help

  • August 25, 2025
  • 2 replies
  • 803 views

Hello everyone, I am trying to figure out if it is possible to use mclag and fortilink to connect the following devices together and how to do it. I have thought of two possible scenarios, but I am not sure if either of them is possible, so I am asking for your opinion. In the first case, I am afraid that I do not have enough ports 10gbit ports to create all link connection, while in the second case, I am afraid that it is not really feasible because I would basically want to have two independent tier1.

 

I don't need guidance with the configuration, I just need help understanding which scenario might be the best one.

 

The system will consist of the following devices, each with four 10Gb ports, which I would like to implement (using fiber SFPs to connect everything).

 

1x Fortigate FG-120G

2x Fortiswitch FS-448E-POE

2x Fortiswitch FS-424E-POE

 

First

Here I don't have the fifth 10Gb port in the 448s to be able to go from the first 448 to the second 424 and from the second 448 to the first 424, even though I'm missing redundancy. “On paper it works,” but is it deployable?

 

diagram1.jpg

 

Second

Here I would like to create two independent “tier1” as “first level”, but again I don't know if this is deployable.

 

 

diagram2.jpg

 

 

Thank you for advice

Best answer by AEK

Hi Dr

Both are technically possible, the first one (2 tiers) needs one FortiLink interface and the second needs two FortiLink interfaces.

However the first one is the the most common one and you are certain you will not have headaches with your segmentation.

2 replies

AEK
SuperUser
AEKAnswer
SuperUser
August 26, 2025

Hi Dr

Both are technically possible, the first one (2 tiers) needs one FortiLink interface and the second needs two FortiLink interfaces.

However the first one is the the most common one and you are certain you will not have headaches with your segmentation.

AEK
DrKranio
DrKranioAuthor
New Member
August 28, 2025

Thank you so much, everything is clear to me and in the end I did as you suggested.

 

Bye!

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!