I've got an LACP connection from my HA pair of FortiGate 600f's to the rest of the environment. There are 2 physical ports that are under the "LACP_Trunk" 802.3ad aggregate interface. What's the best way to monitor these interfaces for HA failover? Is it best to monitor Port1 and Port2 (which is the indication that I got from an article about Multicast https://community.fortinet.com/t5/FortiGate/Technical-Tip-Best-practice-HA-monitored-interface-confi... ) or is it better to monitor the "LACP_Trunk" 802.3ad aggregate interface directly?
TIA!
If you're not using the LACP interface to pass multicast packets, you need to ask a question to yourself which behavior of HA failover you want: Do you want it to failover when only one port goes down?
If your answer is yes, then monitor individual ports. If no because the link is still up and operational with half capacity, then you should monitor the agg interface.
Toshi
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1737 | |
1108 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.