LACP configuration between fortigate and cisco switch in HA design

[Mohamedh219]

Hello 

I configure HA design active-passive 

 

There is no communication + port e0/3 in switch in suspended which connect to passive firewall, how solve this problem or there is another better design HA .

[xshkurti · Accepted solution]

@Mohamedh219 

Basically the design is wrong. You can not configure LACP on Cisco with 2 different Fortigate devices. This is because interfaces on passive device are not active and fortigate uses a virtual mac address that is managed by active member.

The other way around is possible. If you have Cisco Stack then you can create LACP as below
FGT1 port1 and port2 lacp ---- SW gig1/0/1 and gig2/0/1
FGT2 port1 and port2 lacp ---- SW gig 1/0/2 and gig2/0/2

Again worth mentioning, when Cisco Switches are configured as Stack (1 unit)

Attached how it should be