Fortinet FortiGate-5000 manual Layer-2 link aggregation and redundancy configurations

Page 60

FortiSwitch-5003A configurations

FortiSwitch-5003A system

Layer-2 link aggregation and redundancy configurations

The FortiSwitch-5003A board supports 802.3ad static mode layer-2 link aggregation, 802.1q VLANs, and 802.1s Multi-Spanning Tree Protocol (MSTP) for the fabric channels. You can use these features to configure link aggregation and support redundant FortiSwitch-5003A configurations to distribute traffic to multiple FortiGate-5001A or 5005FA2 boards.

Figure 26 shows a basic link aggregation configuration using a single FortiSwitch-5003A board. In this configuration the external switch is connected to FortiSwitch-5003A front panel f5 interface. The switch adds VLAN tags to traffic from the internal and external networks.

Figure 26: Basic link aggregation configuration

Internal Network

External

Network

Internal and external 10-gigabit networks connected to FortiSwitch-5003A front panel interface F7 and to fabric channel 1

13 11

External switch

VLAN tagged traffic

							5140SAP	SERIAL 1	SERIAL 2	ALARM
				5140
9	7	5	3	1	2	4	6	8	10	12	14

Six FortiGate-RTM-XB2 modules installed in RTM slots 6, 8, 9, 10, 11, and

13to provide 10-gigabit fabric interfaces and NP2 acceleration for each FortiGate-5001A board

1 2

FILTER

0 FAN TRAY

1 FAN TRAY

2 FAN TRAY

Distributed 10-gigabit data communication on fabric channel 1

	FortiGate-5000 Series Introduction
60	01-30000-83466-20090108

Image 60

Contents Product updates, technical support, and FortiGuard services FortiGate-5000 SeriesTrademarks Contents FortiGate-5050 chassis FortiGate-5020 chassisFortiGate-5001A security system FortiGate-RTM-XB2 systemFortiSwitch-5003A system FortiSwitch-5003 systemFortiGate-5001SX security system FortiGate-5005-DIST security systemContents FortiGate-5000 Series Introduction Introduction Revision historyRevision History About the FortiGate-5000 series chassis FortiGate-5050-R chassis on FortiGate-5050 chassis onAbout the FortiGate-5000 series boards AboutFortiGate-RTM-XB2 module FortiGate-5001FA2 security systemCommunication between A FortiGate-5050 or FortiGate-5140 chassisFortiGate-5000 Series Introduction About Data Center DC power Customer service and technical supportFortinet documentation Register your Fortinet product FortiGate-5140-R chassis FortiGate-5140 chassis front panel SlotFortiGate-5140 chassis back panel Slot numbersPhysical description of the FortiGate-5140 chassis FortiGate-5140 chassis FortiGate-5140 chassis back panel RTN 21 x 19 x 16.8 in .3 x 48.3 x 42.7 cm FortiGate-5050-R chassis Power LED FortiGate-5050 front panelFortiGate-5050 back panel FortiGate-5050 chassis back panelFortiGate-5050 chassis physical description Dimensions Physical description of the FortiGate-5050 chassisFortiGate-5050 chassis FortiGate-5050 chassis Weight Physical description of the FortiGate-5050 chassis FortiGate-5020 chassis FortiGate-5020 front panelFortiGate-5020 physical description Dimensions Power dissipationFortiGate-5020 back panel Physical description of the FortiGate-5020 chassisFortiGate-5001A security system Front panel LEDs and connectors FortiGate-5001A-DW front panelLEDs Lists and describes the FortiGate-5001A LEDsConnectors Lists and describes the FortiGate-5001A connectorsBase backplane communication Fabric backplane communicationAMC modules FortiGate-RTM-XB2FortiGate-ASM-FB4 FortiGate-RTM-XB2 system From the FortiGate-RTM-XB2 font panel includes a power LED FortiGate-RTM-XB2 power LEDState Description Power Front panel LEDFortiGate-5005FA2 security system FortiGate-5005FA2 front panelLists and describes the FortiGate-5005FA2 board LEDs ACTLink StatusLists and describes the FortiGate-5005FA2 connectors Accelerated packet forwarding and policy enforcementBase backplane gigabit communication FortiGate-5005-DIST security systemFA2 interfaces and active-active HA performance FortiGate-5001FA2-LENC security system FortiGate-5001FA2-LENC front panelLists and describes the FortiGate-5001FA2-LENC board LEDs FortiGate-5001FA2-LENC board LEDsPWR STALists and describes the FortiGate-5001FA2-LENC connectors State Description LinkBase backplane gigabit communication FortiGate-5001SX security system FortiGate-5001SX front panelLists and describes the FortiGate-5001SX board LEDs FortiGate-5001SX LEDsLists and describes the FortiGate-5001SX connectors Base backplane gigabit interfacesBase backplane gigabit interfaces FortiSwitch-5003A system FortiSwitch-5003A front panel Lists and describes the FortiSwitch-5003A front panel LEDs MGMT, B1Base channel interfaces SH1Fabric channel interfaces Base 10GCLI FortiSwitch-5003A configurations Front panel connectorsBase and fabric gigabit switching within a chassis Fabric 10-gigabit switching within a chassis FortiSwitch-5003A base channel 1 HA heartbeat communicationLayer-2 link aggregation and redundancy configurations Basic link aggregation configurationFortiSwitch-5003 system ZRE CLKReset About the ZRE network activity LEDsEXT FLT INT FLTBase backplane communications ETH0ZRE0 ZRE1Base backplane communications Base backplane communications Basic FortiGate security system configuration FortiGate-5005-DIST security systemFortiController-5208 I/O boards Example basic FortiGate-5005-DIST security systemFortiGate-5005FA2 worker boards FortiGate-5005-DIST security system chassis FortiGate-5005-DIST interface names WhereFortiGate-5005-DIST interface names FortiController-5208 system Lists and describes the FortiController-5208 board LEDs FortiController-5208 board LEDsPayload Operation DataControl ManagementBackplane gigabit interfaces D15, D16C15, C16 COM1, COM2