Fortigate 60F - create n°2 ports in trunk

[marconet-22]

Hi Guys

I need to set n°2 interfaces of Fortigate 60F (7.4.1) as core switch.

Both interface in trunk ports with 8 VLAN, and Fortigate run as LAYER 3 switch in both interfaces

Someone have an idea how can sets it?

[AEK]

Hello

1. Create a new LACP interface with 2 interfaces
2. Add to this new interface your 8 VLAN interfaces, each with its VLAN id

https://community.fortinet.com/t5/FortiGate/Technical-Tip-LACP-support-for-entry-level-E-series/ta-p...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-a-VLAN-tagged-interface-802-...

[marconet-22]

Hi

I need to connect two different switch to these ports.

Thank you

[AEK]

Hi

So you can do LACP if your switches are stacked or MLAG.

[marconet-22]

I solved the issue:

First, I configured Software switch with port 5 and port 6 and I assigned L3 Ip Address

Second, I created new VLAN and I joined it to an interface type (Software switch created before)

thanks

[Toshi_Esumi]

What are "n°2 interfaces" on FG60F? 

Toshi

[marconet-22]

In Italian style means number two interfaces(Cisco)/ports(Fortigate)

Marco

[Toshi_Esumi]

Ok, I didn't know. By the way FGTs are never good switches. Especially when you use soft-switch, vlan traffic needs to be handled by the CPU. It would impact overall performance. If you have any decent switches, I would move the switching function to the switch then just have one aggregated connection between the switch and the 60F then put all VLANs on the LAG. And then the 60F can have L3 VLAN interfaces.

Toshi

[AEK]

Or you can go for your first idea: LACP on FGT connected to 2 stacked/MLAGed switches.

[marconet-22]

I think yours is the best way to sets FGT as distribution/core switch.

I will try on lab.

Thanks