Multi-tier ICL-MCLAG configuration

[plsikk]

Hello all Members.

I would like to say hello for all .

I'm starting my adventure with Forti Switches  and need some tips or example how to make configuration.

My case is: like below.

I need to create/configure additional pair of fiber switches connected by ICL-MCLAG and directly connected to stack of switches which are connected to FortiGate's. I already created one pair which is working fine but when I want to activate ICL-MCLAG between switch on top and red rectangle, both are going offline and only factory reset for both help. I found article about three-tier MCLAG config https://community.fortinet.com/t5/FortiGate/Technical-Tip-Three-tier-MCLAG-configuration-on-managed/... but the question is, how to configure on the same level the second pair.

Already prepared 

config switch auto-isl-port-group

for this new pair but exist one is without this config. Is it possible to create new group and setup member ports for already connected and configured pair without removing those switches from FortiGate. And if it is possible , how to do this with less downtime.

I'm appreciate for any help.

[Anthony_E]

Hello plsikk,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

[Anthony_E]

Hello plsikk,

We are still looking for someone to help you.

We will come back to you ASAP.

Regards,

[plsikk]

ok, Thank you

[sachitdas_FTNT · Accepted solution]

Hi,

On the tier1 MCLAG ICL FSWs pair, create auto-isl-port-group. We recommend a criss-cross connection between tier1 and tier2. For example on tier1 ports used are port1 port2, then config on both tier1 FSWs should be

config switch auto-isl-port-group

edit name

set members port1 port2

end

For existing connection to 2nd pair of tier2 ICLs, if you havent configured auto-isl-port-group, then you can configure the same during a small maintenance window. and you should see the auto-isl-port-group name in the trunk.

command:- show switch trunk

If you dont see the trunk, then you need to delete the existing trunk and then new trunk will show up.

config switch trunk

delete <trunk name>

end

There will be a network impact during this change.

[plsikk]

Is working prefect. Already configured for both groups . Many Many thanks for this solution