Hot!Link Aggregation

Author
Ydaew
New Member
  • Total Posts : 20
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/05/30 05:06:21
  • Status: offline
2019/05/30 06:34:02 (permalink)
0

Link Aggregation

Hello,
Is it possible to aggregate FortiGate 3100D 4 links to 4 different Cisco switches ?
#1

6 Replies Related Threads

    Toshi Esumi
    Expert Member
    • Total Posts : 1622
    • Scores: 137
    • Reward points: 0
    • Joined: 2014/11/06 09:56:42
    • Status: offline
    Re: Link Aggregation 2019/05/30 08:11:00 (permalink)
    0
    It's not about the FGT, but it's about the Cisco switches. I think you have to have those switches stacked to have one Port-channel spread to multiple chassis.
    #2
    Ydaew
    New Member
    • Total Posts : 20
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/05/30 05:06:21
    • Status: offline
    Re: Link Aggregation 2019/05/30 10:31:02 (permalink)
    0
    Thanks, Actually they are going to be stacked. So no special requirements but the switches to be stacked
    #3
    ede_pfau
    Expert Member
    • Total Posts : 6019
    • Scores: 480
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Link Aggregation 2019/05/31 05:02:29 (permalink)
    0
    Yes, MCLAG is supported. I used to trunk a FGT cluster to H3C switch stacks.
    Only thing to watch is that you should enable "fast mode" on the LACP trunk ports - check interval is 2 seconds then, instead of 30s. And active LACP, not passive or static.

    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #4
    emnoc
    Expert Member
    • Total Posts : 5208
    • Scores: 339
    • Reward points: 0
    • Joined: 2008/03/20 13:30:33
    • Location: AUSTIN TX AREA
    • Status: offline
    Re: Link Aggregation 2019/05/31 11:04:20 (permalink)
    0
    Yes you can do it. been done with  VSS,Nexus, StackedSwitches,etc....
     
    Ken Felix

    PCNSE,  NSE , Forcepoint ,  StrongSwan Specialist
    #5
    Baptiste
    Gold Member
    • Total Posts : 160
    • Scores: 13
    • Reward points: 0
    • Status: offline
    Re: Link Aggregation 2019/06/16 23:51:10 (permalink)
    0
    Hi
    I just setup 802.3ad  aggregate for LAN interface (port 1 & 2).
    When I remove port1, still working, I can ping the lan-aggr interface
    When I remove port2, stop working, I cannot ping the lan-aggr interface
     
    On switch side (HPE 5130el) : Member port GE2/0/33 of aggregation group BAGG4 changed to the inactive state, because the aggregation configuration of its peer port is incorrect.
     
    part of config of FGT aggregate interface :
     
    lacp-mode : active
    lacp-ha-slave : enable
    lacp-speed : slow
    min-links : 1
    min-links-down : operational
    algorithm : L4
    link-up-delay : 50
     
    I think I have to change :
    set lacp-speed fast
     
    But will it change something when I unplug port 2 ?

    FGT 100D 6.0.5 + FTK200
    FGT 60E 5.6.7 & 6.0.4
    FGT 40C 5.0.13
    FAZ VM 6.2.0
    FAP 210B/221C/223C/321C/421E
    #6
    ede_pfau
    Expert Member
    • Total Posts : 6019
    • Scores: 480
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Link Aggregation 2019/06/17 04:38:59 (permalink)
    0
    Yes, switch to "lacp-speed: fast" (2 second interval), and on the Cisco switch you should have
    switch# configure terminal
    switch(config)# interface fastethernet 0/1
    switch(config-if)# channel-group 5 mode passive

    that is, one side will be "LACP active" and the other side "LACP passive". Cisco side should never be "LACP on".

    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #7
    Jump to:
    © 2019 APG vNext Commercial Version 5.5