| Description |
This article describes how to enable QSFP28 port splitting on FortiGate to create four 25G subports (e.g., port17.1 to port17.4) and use them in two separate LAGs (LAG1 to SW1, LAG2 to SW2) using QSFP28-to-4×SFP28 passive DAC breakout cables. |
| Scope |
FortiGate 1800F/1801F, 4200F/4201F, 4400F/4401F (with QSFP28 ports). |
| Solution |
2 different LAGs can be built on the same QSFP port after being split (say port17.1 & 17.2 on LAG1 and port 17.3 & 17.4 on LAG2). These subports behave like regular physical interfaces and can be aggregated into separate LAGs without issues. FortiGate QSFP28 breakouts are standards-based IEEE 802.3 and compatible with any vendor respecting the same standard.
FortiGate (QSFP28 port17) -> [QSFP28-to-4×SFP28 DAC]. ├─ SFP28 #1 → SW1 (25G port A) → LAG1. ├─ SFP28 #2 → SW1 (25G port B) → LAG1. ├─ SFP28 #3 → SW2 (25G port C) → LAG2. └─ SFP28 #4 → SW2 (25G port D) → LAG2.
config system global set split-port port17 end
The system will reboot to make the setting take effect. After the reboot: port17 → port17.1, port17.2, port17.3, port17.4 (all default 10G).
config system interface edit "port17.1" set speed 25000full next end
Speed change applies to all four subports simultaneously. No reboot needed.
config system interface
config system interface
Check split status: get system interface physical. Confirm 25G speed: diagnose hardware deviceinfo nic port17.1. LAG status: diagnose netlink aggregate name LAG1. Traffic stats: diagnose netlink interface list LAG1.
Related documents: |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.