FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
alif
Staff
Staff
Article Id 193714

Description


Link Aggregation Control Protocol (LACP) is now supported on FortiGate and FortiWiFi-90E, 80E, 60E, 50E, and 30E.

 

Scope

 

FortiGate.


Solution

 

LACP can be configured from both GUI and CLI.
 
From GUI.
  1. Go to Network -> Interfaces.
  2. Select 'Create New' -> Interface.
  3. Set Type to '802.3ad Aggregate'.
  4. Configure the other settings as required.
  5. Select 'OK'.

 

Example:


Untitled_1.gif

 

 

To create a link aggregation interface from CLI:

 

configure system interface

    edit "Aggregate Intf"

        set vdom "root"

        set type aggregate

        set member "port 8" "port 10"

        set device-identification enable

        set lldp-transmission enable

        set role lan

        set snmp-index 13

    next

end

To check the aggregate interface status:

 

FGT# diagnose netlink aggregate name "Aggregate Intf"

LACP flags: (A|P)(S|F)(A|I)(I|O)(E|D)(E|D)

(A|P) - LACP mode is Active or Passive

(S|F) - LACP speed is Slow or Fast

(A|I) - Aggregatable or Individual

(I|O) - Port In sync or Out of sync

(E|D) - Frame collection is Enabled or Disabled

(E|D) - Frame distribution is Enabled or Disabled

 

status: up

distribution algorithm: L4

LACP mode: active

LACP speed: slow

LACP HA: enable

aggregator ID: 1

ports: 2

actor key: 17

actor MAC address: 00:09:0f:68:35:94

partner key: 17

partner MAC address: 00:09:0f:68:37:d8

 

slave: port8

status: up

link failure count: 3

permanent MAC addr: 00:09:0f:68:35:94

actor state: ASAIEE

partner state: ASAIEE

aggregator ID: 1

 

slave: port10

status: up

link failure count: 2

permanent MAC addr: 00:09:0f:68:35:95

actor state: ASAIEE

partner state: ASAIEE

aggregator ID: 1