has anyone build a setup where you can transport LACP transparent over a FortiGate?
Our Setup is that the FortiGate will be installed between two Cisco devices which have configured LACP.
The FortiGate should just analyze the traffic and should be transparent for the Cisco's.
This works so far except for LACP.
Here is an example of one Port:
config system interface
set vdom "Monitor"
set fail-detect enable
set fail-alert-interfaces "port3"
set broadcast-forward enable
set l2forward enable
set vlanforward enable
set stpforward enable
set type physical
set alias "01-Edge"
set snmp-index 8
The Virtual Wires are configured with Wildcard VLANs.
This is the reason why we need to use the Virtual Wire. In the Transparent we needed to configure for every VLAN an interface if we wanted to analyze the traffic. This would have blow up the configuration.
Am I missing something?
I can see that on port4 the LACP message from the Cisco device is seen, but it will be not transported to port3 (which is the partner of the virtual wire).
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.