FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
riteshpv
Staff
Staff
Article Id 193224

Description

This article describes how to get the AccessPoint(AP) up with Link Aggregation Protocol(LACP) config.



Solution

Step by step:
_ Get the AccessPoint up (Enabled Online) on the controller (connected via its first interface). 
 
_ Via the GUI or CLI of the controller enable the second interface index of the AccessPoint with Link Aggregation Protocol
Note: Do not connect the second interface of the AccessPoint to the switch. 
From GUI – Edit AccessPoint, select Ethernet Interface tab – Edit Interface index 2 – Drop down and select Enable for Link Aggregation Protocol.
From CLI
 
config terminal 
interface ap <ap-id> 2 
lacp enable 
end 
 
Cross verify the changes is showing on the controller. 
 
show interfaces Ethernet ap <ap-id> 
 
example:
 
Controller#  show interfaces Ethernet ap 5
Type        ID  Name            IfIndex MTU     MAC Address       Admin State Op State  Last Change          Uplink Type LACP
ap            5   AP-5                   1       1500    00:0c:e6:xx:xx:xx  Up          Enabled   08/17/2018 15:44:58  Uplink      disable
ap            5   AP-5                   2       1500    00:0c:e6:xx:xx:xx  Up          Disabled  08/17/2018 15:48:41  Uplink-lacp enable
        Ethernet(2 entries)
 
Connect to the AccessPoint and run the following command:
ap 5> config show ethernet
 
Ethernet 0 MAC parameters
----------------------------------------
 MAC address          = 00:0c:e6:xx:xx:xx  
 Default destination  = 00:bb:00:bb:00:bb
 MTU                  = 1500
 Speed                = 1 Gbps
 Duplexity            = Full Duplex
 Operational State    = Up
 Uplink               = 0
 Bonding              = DISABLE
 AP MAC Assignment    = ETH0
 
 
Ethernet 1 MAC parameters
----------------------------------------
 MAC address          = 00:0c:e6:xx:xx:xx  
 Default destination  = 00:bb:00:bb:00:bb
 MTU                  = 1500
 Speed                = 100 Mbps
 Duplexity            = Full Duplex
 Operational State    = Down
 Uplink               = 1
 Bonding              = DISABLE
 AP MAC Assignment    = ETH0
 
_ Configure the Link Aggregation Protocol on the switch. 
IMP Note: The switch port configuration of the switch should be Link Aggregation Protocol active. 
On FortiSwitch:
 
    edit "LACPtest"
        set port-selection-criteria src-dst-ip
        set description ''
        set mode lacp-active                               < ----------------- LACP active
        set member-withdrawal-behavior block
        set bundle disable
        set auto-isl 0
        set mclag disable
        set mclag-icl disable
            set members "port5" "port6"                    < ------------------ Port were the AP is connected.
        set lacp-speed slow
    next
end
 
On Cisco Switch:
 
interface Port-channel15
 switchport trunk native vlan 55
 switchport trunk allowed vlan 2-4094
 switchport mode trunk
 logging event trunk-status
 logging event bundle-status
 logging event spanning-tree
 logging event status
 logging event subif-link-status
 spanning-tree portfast trunk
!
 
interface GigabitEthernet1/0/25
 switchport trunk native vlan 55
 switchport trunk allowed vlan 2-4094
 switchport mode trunk
 channel-protocol lacp
 channel-group 15 mode active
!
interface GigabitEthernet1/0/26
 switchport trunk native vlan 55
 switchport trunk allowed vlan 2-4094
 switchport mode trunk
 channel-protocol lacp
 channel-group 15 mode active
!
 
On HP Switch:
 
2530# system-view
2530(config)#trunk ethernet 15-16 trk1 
2530(config)#trunk ethernet 15-16 trk1 lacp 
2530(config)#trunk-load-balance L2-based            < ---------------  (if you are using AP's in L2 mode i.e. no IP addresses)
 
This will result in the trunk being put into the default VLAN. If the AP need to be on separate VLAN then use following command:
2530(config)#vlan xx untagged Trk1              
2530(config)#exit
 
IMP NOTE: 
>The configuration on Switch might change depending on the Switch models/Versions. The above config are for reference.
>The Important factor in the switch config is that the trunk port needs to be set with Link Aggregation Protocol ACTIVE.
 
_ Now connect the 2nd interface of AccessPoint to this switch port configuration of Link Aggregation Protocol
Both links will come up. 
It might take a while that to be reflected on the controller. 
Example:
 
Conroller#  show interfaces Ethernet ap 5
Type        ID  Name            IfIndex MTU     MAC Address       Admin State Op State  Last Change          Uplink Type LACP
ap          5   AP-5            1       1500    00:0c:e6:xx:xx:xx Up          Enabled   08/17/2018 15:44:58  Uplink      disable
ap          5   AP-5            2       1500    00:0c:e6:xx:xx:xx Up          Enabled   08/17/2018 15:53:52  Uplink-lacp enable
 
Connect to the AP and run the following command:
 
AP>  config show ethernet
 
Ethernet 0 MAC parameters
----------------------------------------
 MAC address          = 00:0c:e6:xx:xx:xx  
 Default destination  = 00:bb:00:bb:00:bb
 MTU                  = 1500
 Speed                = 1 Gbps
 Duplexity            = Full Duplex
 Operational State    = Up
 Uplink               = 0
 Bonding              = DISABLE
 AP MAC Assignment    = ETH0
 
Ethernet 1 MAC parameters
----------------------------------------
 MAC address          = 00:0c:e6:xx:xx:xx  
 Default destination  = 00:bb:00:bb:00:bb
 MTU                  = 1500
 Speed                = 1 Gbps
 Duplexity            = Full Duplex
 Operational State    = Up
 Uplink               = 2
 Bonding              = ENABLE
 AP MAC Assignment    = ETH0
 
Notes : Link aggregation is available only on AP832, AP822, FAP-U421, and FAP-U423. If the switch that terminates the AccessPoint does not support Link Aggregation Protocol, the AccessPoint will fall back to non-Link Aggregation Protocol mode with only one interface passing data traffic. Static bonding is not supported.

 

 

Contributors