giving 2Gbits of bandwidth - 100F firewall and three 248E-FPOE switches

[matteocostanzo]

I purchased a 100F firewall and three 248E-FPOE switches.

How can I connect the devices together giving 2Gbits of bandwidth to each switch.

I can aggregate the ports but how can I separate three FortiLink interfaces for the three switches. ??

I'm missing this step. Why does it seem to me that the FortiLink interface is always and only one?? Or am I misunderstanding something??

[AnthonyH]

Hello matteocostanzo,

From looking at the datasheet for the FortiGate 100F, there are two Fortilink ports (X1 and X2) you can plug the FortiSwitches into that support up to 10 Gb. https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortigate-100f-series.pdf

And you can add more members to fortilink if go to WiFi & Switch Controller > FortiLink Interface: https://docs.fortinet.com/document/fortiswitch/7.6.0/fortilink-guide/173260/configuring-fortilink

[matteocostanzo]

I'm missing a step. due to my lack of knowledge.

I saw that on the fortigate side I can configure a single fortilink interface (red rectangle).

But if I need to connect multiple switches as in the figure, each one with LACP trunks to have more bandwidth.

Is it right for me to put all four firewall ports on the same fortilink interface and then connect the thing to different switches??

How should this thing be managed in terms of configuring the firewall and switch????

[Richie_C · Accepted solution]

Hi @matteocostanzo 

It is possible to have multiple FortiLinks. This is described in the following article. 

https://docs.fortinet.com/document/fortiswitch/7.6.0/fortilink-guide/173280/optional-fortilink-confi...

In this case, you could have a FortiLink interface for each switch.

The same document also has a number of possible recommended topologies:

https://docs.fortinet.com/document/fortiswitch/7.6.0/fortilink-guide/617516/determining-the-network-...

Looking at your diagram and assuming that there is no FortiGate HA. The following topology would be worth considering as it adds resilience. This would additionally require a connection(s) between the switches:

https://docs.fortinet.com/document/fortiswitch/7.6.0/fortilink-guide/801204/single-fortigate-unit-ma...

I hope that helps.