H/A A-A with SMLT to Nortel/Avaya

[#1]

Hi, I am trying to setup two clustered FGT3016B H/A with Active-Active downstream to a set of Nortel passport switches. I have designated Port 3/4 to be 802.3ad Link Aggregated interfaces. The Nortel switches support SMLT (Split Multi Link Trunking) meaning these two switches can act as a single switch to an endpoint device. I have designated Port 3/4 on each Nortel switch and set it as a Split-MLT link. When everything is connected: FGT-Primary Port 3 -> Nortel A Port 3 FGT-Primary Port 4 -> Nortel B Port 3 FGT-Secondary Port 3 -> Nortel A Port 4 FGT-Secondary Port 4 -> Nortel B Port 4 There seems to be some problems as I cannot get a VLAN trunked from the endpoint to the Nortels to the Fortinet. Does anybody have experience on setting up H/A A-A via an SMLT configuration? Any help/advice is greatly appreciated. Thanks.

[MisterAG]

I haven' t done this with a Fortigate, but I' ve done it with another vendor that runs active/active: *Always configure your SMLT or any link aggregation with one (or neither) of the aggregated connections active. Make sure it works with one side, disable it, make sure the other side works, and only then try to run both sides at once* For a single FGT with two uplinks (one to each passport) Configure a 802.3ad Link Aggregation with at least two ports Configure your VLANs and attach them to the lag0 interface Configure your firewall policies on the various VLAN interfaces Configure your single port SMLT on the pasport switches like any other switch with two connections Repeat the same process for the second FGT unit, using a different SMLT ID. If you' ve already clustered your switches, I imagine that the FGT side of the configuration will be done automatically for you. On your passports, try to enable both SLPP and CP-Limit to detect any loops created by the link aggregation.

[#3]

Thanks MisterAG, I will try out your suggestions and let you know how it goes.