FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
pramod
Staff
Staff
Article Id 281134
Description This article provides a command guide to create a split port in the FortiGate-1000F series.
Scope FortiGate-1000F and 1001F series.
Solution

The FortiGate-1000F and 1001F series support the split port feature on ports 33 and 34.

 

Supported cables can be obtained from the datasheet.

High Performance with Flexibility

 

The following commands can be used to split ports:

 

config system global
    config split-port-mode
        edit "port33"
            set split-mode 4x25G
        next
            edit "port34"
        next
end

 

Splitting the interfaces requires a system reboot. Multiple interfaces may be split at the same time.

The FortiGate will reboot after enabling the split mode.

 

 After the system boots up, the following changes take place:


=============================================================================================

    edit "port33/1"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 42
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port33/2"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 43
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port33/3"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 44
        set forward-error-correction disable
        set speed 25000full
    next
    edit "port33/4"
        set vdom "root"
        set type physical
        set mediatype sr
        set snmp-index 45
        set forward-error-correction disable
        set speed 25000full
    next

 

Notes:

As of FortiOS v7.6.4, the FortiGate-1000F and 1001F models support auto-negotiation on 10G Base-T interfaces, eliminating the requirement for manual speed configuration. For additional details, refer to Auto speed negotiation for 10G Base-T on FortiGate 100xF devices.

 

When the change is performed in a cluster, the members will not reboot simultaneously; instead, the following events will take place:

  • Perform the split-port command on the primary.
  • Primary reboots, secondary takes over.
  • Primary comes back and takes over.
  • Secondary reboots.
  • Secondary comes back, and both have the split-port config.