Hello, I am new to the community but I really like Fortinet, could you please help me, I have 2 Fortiswitches, a 424E and a 448E, I would like to create an aggregation port to increase the bandwidth, I know I can do it with LAG
But I would like to understand the LACP mode, if what I want is an aggregation interface, which mode should I use? Static, active or passive?
I tried static mode on both sides and the interfaces do not go up.
The manual indicates Active on one side and Passive on the other side, but I would like to understand why? or better understand the modes of LACP.
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Starting from later version of FSW the links should be automatically build on every port ISL.
There is this part of the Administration guide that explain all the recommended topologies you can achieve depending on the requirements of your network in terms of availability, throughput etc.
I suppose you are referring to the FSW in Standalone mode (not managed by FGT). You can read more about this configurations in Administration guide. If the aggregation is built between two FSW you can also use "auto-isl" that can create trunks/aggregation links automatically.
The implementation of LACP in FSW is based in the open standard, you can find more information also by searching directly for the protocol name. The suggestion is to use at least one side as Active (both can be configured as active). The benefit of using Active is in cases of a link failure, both switches will discover in time (via LACP PDU missing) that one of the links has failed. The switch will be able to remove the fault link from the group quickly without sending packets that are destined to be dropped since the other side is not receiving them.
Created on 11-17-2023 06:00 AM Edited on 11-17-2023 07:30 AM
Hello, thanks for the answer
I tell you that in Active/Passive mode it works for me, but according to your answer the FSWs are managed by a 100F firewall, maybe that is the reason why I lose administration of one of the FortiSwitches, how could I solve that problem or another method can I configure LAG
I was able to connect them in the following way, I created the fortilink interface from my FW and simply placed the cables directly and the fortilink placed them as an aggregation, am I correct? Or do I have something else to configure?
This is how my structure was left, without creating truncal links in the FSW
Starting from later version of FSW the links should be automatically build on every port ISL.
There is this part of the Administration guide that explain all the recommended topologies you can achieve depending on the requirements of your network in terms of availability, throughput etc.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1547 | |
1030 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.