Ring Topology

[ddemetriou]

Hi to all!!

i setup my first ring topology and i am facing random internet disruptions. I have lots of experience on star topology.

I am using 2x FG-100F in HA with 2 ISPs. SD-WAN is using pinging to 8.8.8.8 for failover checks.

Ports 1 from each Firewall are connected to switch No1. Ports 13 from each Firewall are connected to switch No10. All 10 switches are connected with fiber cables in a ring mode. We are using Fortilink with type aggregate with split disabled. Fortlink includes ports 1 and 13 only.

What i am facing is random packet losses when i am pinging from any firewall to 8.8.8.8. If i disconnect the firewalls and connect my laptop with public ip configured, i have no losses. So, i don't think the ISP is an issue. 

Note1: My FGs are using 7.0.16 FW and my FSs are using 7.4.2

Note2: I am not familiar with MCLAG and i don't know if it is needed here.

[AEK]

Hi

Split interface disabled means both interfaces are active, it is for ICL and is not supported on access switches like 124F and 148F. Which FSW model are you using?

On the other hand, here you are using 10 FortiSwitches, I'm not sure you can use ICL with more than 2 switches. You need to check this as well.

I think you want to enable split interface, so it uses ISL instead of ICL, and all should be fine.