Link Agregation with WAN infterfaces ( FGT 200E -- CISCO 2960-X)

[Phinestra200]

Hi,

do somebody already szetup a link agregation with 2 wan ports to Cisco 2960-X and it worked correctly on Fortigate 200E?

here is the story :)

we have a 200E freshly installed and we've created an interface vlan on with no problem for interconection with remote site.

we were unable to ping the remote IP @ until we removed one port( WAN).

it seems the agregate work only with single WAN.

it seems strange cause we've already setup a link agregation with WAN interfaces on 200D before.

thank you in advance for any help,

Phi.

[ede_pfau]

WAN ports are in no respect different from other ports. So either you could

- use both WAN ports for an LACP trunk

- use any two ports for the WAN link, again in LACP mode

If you reread your post you'll notice you left out some information, like something with a VLAN...and on some port...maybe you could clarify this.

LACP against a Cisco switch is not complicated. Use active LACP (not 'trunk', meaning 'static bundle') on Cisco. Use 'fast' parameter on LACP virtual port (CLI only).

And, just in case, it's not a Nexus, right?

[Phinestra200]

Hi ede_pfau

thanks for your reply.

it's true i forgot to mention vlan.

i already have  this on my setup  :

   "set lacp-mode active"

there are 2 vlan interfaces on the agregate, only one is OK.

It's very strange :(

Phi.

[Toshi_Esumi]

Do you mean two WAN ports aggregated and one VLAN on it then ping doesn't work until one of two WAN ports is shut down? Or two WAN ports aggregated and two VLANs on it then ping doesn't work until one of two VLAN subinterfaces is shut down?

[Phinestra200]

FYI.

We finally switch on another ports and everything worked fine.

i do not understand why we were unable to make it work with WAN ports :(