Fortigate and Cisco switch LACP not working

[capricorn80]

Hi!

I am testing topology where fortigate connected to switch.

Config onFortigate.

edit "LAN" set vdom "root" set allowaccess ping set type aggregate set member "port2" "port3" set role lan set snmp-index 12 set lacp-mode static

Cisco Switch

interface Ethernet0/2 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode active

interface Ethernet0/3 switchport trunk encapsulation dot1q switchport mode trunk channel-group 1 mode active

interface Port-channel1 switchport switchport trunk encapsulation dot1q switchport mode trunk

Output on Cisco

Group Port-channel Protocol            Ports ------+-------------+-----------+----------------------------------------------- 1 Po1(SD)                LACP                Et0/2(s) Et0/3(s)

Fortigate:

diagnose netlink aggregate name LAN status: up ports: 2 link-up-delay: 50ms min-links: 1 ha: backup distribution algorithm: L4 LACP mode: static

slave: port2 link status: up link failure count: 0 permanent MAC addr: 00:0c:29:4d:df:96

slave: port3 link status: up link failure count: 0 permanent MAC addr: 00:0c:29:4d:df:a0

diagnose sniffer packet LAN

5.963232 802.1Q vlan#1 P0

Any help in this case?

[ebakke84]

have you tested lacp mode active ?

[capricorn80]

Even thought I set the command to active it doesnt show up so that means by default its active. which was like this when I started it and then I found in the doc to use passive. Still does work. I created another LACP with another switch and that does work so something wrong on Fortigate.

edit "LAN" set vdom "root" set allowaccess ping set type aggregate set member "port2" "port3" set role lan set snmp-index 12

[ebakke84]

what type of cisco switch do you have?

make sure you not using a 10gig only interface on cisco if you not have a fortigate with 10gig interface. 

have you tested: set lacp-speed slow ?

[emnoc]

cisco 

config t

   int range gi 0/2-3

    shut 

    no shut

  int port 1

     shut 

    no shut

end

  show lacp system-identifier

  show lacp  inter gi 0/2-3

  show port summary

The ports are in a  s state 

Ken Felix