Hello FortiSwitch integrators
Any one managed to make it work a FortiSwitch connected to a pair of VLAGed Lenovos.
It was working fine with Cisco but couldn't manage to do it with FortiSwitch.
Configuration was like this (same on both Lenovos)
interface port 1
switchport mode trunk
switchport trunk allowed vlan 1,100,200
interface port 1
lacp mode active
lacp key 10
vlag enable
vlag tier-id 5
vlag adminkey 10 enable
On Cisco was like that:
interface Port-channel1
switchport trunk allowed vlan 1,100,200
switchport mode trunk
interface GigabitEthernet0/1
switchport trunk allowed vlan 1,100,200
switchport mode trunk
channel-group 1 mode active
interface GigabitEthernet0/2
switchport trunk allowed vlan 1,100,200
switchport mode trunk
channel-group 1 mode active
On FortiSwitches I created a trunk from 2 ports, LACP active mode, allowed VLAN 1,100,200, but according to my first tests it doesn't work, I mean no traffic seem to pass.
Sadly I had to roll back without being able to collect relevant logs, so actually I'm not sure it didn't work because of VLAG, but can actually be a STP issue or anything else.
Any similar experience or useful hint would be appreciated.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello Abdelkrim,
I hope you are doing well!!
Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.
Thanks,
The configuration looks reasonable and seems like it should work. The problem may be due to incorrect port configuration on the FortiSwitch or a mismatch between the Lenovo and FortiSwitch settings. It is recommended that you first carefully check the port settings on both devices and also ensure that the VLANs are configured correctly. If the problem persists, it is recommended to enable VLAG protocol support on both devices and check that the configurations between them are consistent. It may also be worth paying attention to the STP settings on both devices and making sure they are consistent.
After a second try the network worked fine and with the same configuration shared above. The issue was only in some wrong VLAN configuration.
For info, Lenovo vLAG is like Cisco vPC and Juniper MC-LAG.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1560 | |
1034 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.