FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
alif
Staff
Staff
Article Id 193714
Description
Link Aggregation Control Protocol (LACP) is now supported on FortiGate and FortiWiFi-90E, 80E, 60E, 50E, and 30E.
Solution
LACP can be configured from both GUI and CLI.

From GUI.

1) Go to Network -> Interfaces.




2) Select 'Create New' -> Interface.




3) Set Type to '802.3ad Aggregate'.





4) Configure the other settings as required.





5) Select 'OK'.


To create a link aggregation interface from CLI:


# configure system interface

    edit "Aggregate Intf"

        set vdom "root"

        set type aggregate

        set member "port 8" "port 10"

        set device-identification enable

        set lldp-transmission enable

        set role lan

        set snmp-index 13

    next

end

To check the aggregate interface status:


FGT# diagnose netlink aggregate name "Aggregate Intf"

LACP flags: (A|P)(S|F)(A|I)(I|O)(E|D)(E|D)

(A|P) - LACP mode is Active or Passive

(S|F) - LACP speed is Slow or Fast

(A|I) - Aggregatable or Individual

(I|O) - Port In sync or Out of sync

(E|D) - Frame collection is Enabled or Disabled

(E|D) - Frame distribution is Enabled or Disabled


status: up

distribution algorithm: L4

LACP mode: active

LACP speed: slow

LACP HA: enable

aggregator ID: 1

ports: 2

actor key: 17

actor MAC address: 00:09:0f:68:35:94

partner key: 17

partner MAC address: 00:09:0f:68:37:d8


slave: port8

status: up

link failure count: 3

permanent MAC addr: 00:09:0f:68:35:94

actor state: ASAIEE

partner state: ASAIEE

aggregator ID: 1


slave: port10

status: up

link failure count: 2

permanent MAC addr: 00:09:0f:68:35:95

actor state: ASAIEE

partner state: ASAIEE

aggregator ID: 1


Related Articles

Technical Tip: Initial troubleshooting steps for LACP (Link Aggregation - 802.3ad)

Contributors