FortiSwitch Standalone Mode Administration Guide

LACP Mode

This chapter contains information on using a FortiSwitch in Link Aggregation Control Protocol (LACP) mode.

Configuring the Trunk/LAG Ports

  1. Go to Switch > Switch > Port and select Create Trunk.
  2. Give the trunk an appropriate name.
  3. Set Mode to either lacp-active or lacp-passive.
  4. Add the required ports to the Members
  5. Select

Using the CLI:

config switch trunk edit <name> set description <description_str> set lacp-speed {fast | slow} set max-miss-heartbeats <int> set members <ports> set member-withdrawal-behaviour {block | forward} set mode {lacp-active | lacp-passive} set port-extension {enable | disable} set port-extension-trigger <min_value_int> set port-selection-criteria {src-ip | dst-ip | src-dst-ip}

end

end

Example Configuration

The following is an example CLI configurations for trunk/LAG ports:

Figure 5: Trunk/LAG ports

  1. Configure the trunk 1 interface and assign member ports as a LAG group: config switch trunk edit trunk1 set members “port1” “port2” “port3” set description test set mode lacp-passive set port-selection criteria src-dst-ip

end

end

  1. Configure the switch ports to have native vlan assignments and allow those vlans on the port that will be the uplink port:

config switch interface edit port 1 set native-vlan 1 next edit port 2 set native-vlan 2 next edit port 3 set native-vlan 3 next edit port 4 set native-vlan 4 set allowed vlans 1 2 3 next edit port 5 set native-vlan 5 set allowed-vlans 1 2 3

end end

LACP Mode                                                                                              Managing a FortiSwitch unit with a FortiGate

  1. Configure the trunk 2 interface and assign member ports as a LAG group: config switch trunk edit trunk2 set members “port4” “port5” set description test set mode lacp-passive set port-selection criteria src-dst-ip

end end

Viewing the Configured Trunk

In order to see the details of a configured trunk, use the following command:

diagnose switch trunk list

This entry was posted in Administration Guides, FortiSwitch and tagged , , , on by .

About Mike

Michael Pruett, CISSP has a wide range of cyber-security and network engineering expertise. The plethora of vendors that resell hardware but have zero engineering knowledge resulting in the wrong hardware or configuration being deployed is a major pet peeve of Michael's. This site was started in an effort to spread information while providing the option of quality consulting services at a much lower price than Fortinet Professional Services. Owns PacketLlama.Com (Fortinet Hardware Sales) and Office Of The CISO, LLC (Cybersecurity consulting firm).

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.