FortiSwitch-5003A CLI reference

config

switch fabric-channel trunk

Use this command to create a trunk and add FortiSwitch-5003A interfaces to the trunk. You use trunks to group FortiSwitch-5003A interfaces so that you can use 802.3ad static mode layer-2 link aggregation to distribute sessions to the fabric interfaces of the FortiGate-5001A and 5005FA2 boards connected to the FortiSwitch-5003A interfaces in the trunk.

For information about FortiSwitch-5003A link aggregation for FortiGate-5140 chassis, see “Fabric channel layer-2 link aggregation” on page 33. For information about FortiSwitch-5003A link aggregation for FortiGate-5050 chassis, see “Fabric channel layer-2 link aggregation” on page 56.

Syntax

config switch fabric-channel trunk edit <trunk_name>

set members <interface_names> end

Variables

Description

Default

 

 

 

edit <trunk_name>

Enter the name of a trunk to add or edit. This trunk name

 

 

appears in fabric channel interface lists.

 

members <interface_names>

Enter the names of the FortiSwitch-5003A fabric channel

 

 

interfaces to add to the trunk. An interface can be added to only

 

 

one trunk. Separate each interface name with a space. You can

 

 

enter the interface names in any order.

 

 

To add or remove an interface from a trunk, retype the

 

 

complete list as required.

 

 

For the fabric channel <interface_names> can be:

 

 

slot-2/1used to connect the fabric channels of two

 

 

FortiSwitch-5003A boards installed in the same chassis.

 

 

slot-3FortiGate chassis slot 3.

 

 

slot-4FortiGate chassis slot 4.

 

 

slot-5FortiGate chassis slot 5.

 

 

slot-6FortiGate-5140 chassis slot 6.

 

 

slot-7FortiGate-5140 chassis slot 7.

 

 

slot-8FortiGate-5140 chassis slot 8.

 

 

slot-9FortiGate-5140 chassis slot 9.

 

 

slot-10FortiGate-5140 chassis slot 10.

 

 

slot-11FortiGate-5140 chassis slot 11.

 

 

slot-12FortiGate-5140 chassis slot 12.

 

 

slot-13FortiGate-5140 chassis slot 13.

 

 

slot-14/f8FortiGate-5140 chassis slot 14 or

 

 

FortiSwitch-5003A front panel slot 14/F8.

 

 

f7 FortiSwitch-5003A front panel slot F7.

 

 

f6 FortiSwitch-5003A front panel slot F6.

 

 

f5 FortiSwitch-5003A front panel slot F5.

 

 

f4 FortiSwitch-5003A front panel slot F4.

 

 

f3 FortiSwitch-5003A front panel slot F3.

 

 

f2 FortiSwitch-5003A front panel slot F2.

 

 

f1 FortiSwitch-5003A front panel slot F1.

 

Example

This example shows how to add slot-6, slot-7, and slot-8to a trunk named trunk_678. This trunk can distribute sessions to FortiGate-5001A or 5005FA2 boards in chassis slots 6, 7, and 8.

config switch fabric-channel trunk edit trunk_678

set members slot-6 slot-8 slot-7 end

FortiSwitch-5003A and 5003 Fabric and Base Backplane Communications Guide

 

01-30000-85717-20081205

101

Page 101
Image 101
Fortinet 5003A manual Switch fabric-channel trunk, Set members interfacenames end

5003, 5003A specifications

Fortinet's FortiGate 5003 and 5003A are high-capacity, next-generation firewalls designed for enterprises that require advanced security solutions with a strong focus on performance and scalability. These models are part of Fortinet's expansive line of FortiGate appliances, which leverage innovative technologies to provide robust protection against a variety of cyber threats while maintaining seamless network operations.

One of the standout features of the FortiGate 5003 and 5003A is their impressive throughput capabilities. With multiple high-speed network interfaces, these firewalls can handle substantial amounts of traffic, ensuring that data flows smoothly without creating bottlenecks. This makes them ideal for organizations that operate large-scale networks or have significant bandwidth demands.

The FortiGate 5003 series is equipped with Fortinet's proprietary FortiOS, an intuitive operating system that integrates firewall, VPN, antivirus, intrusion prevention, web filtering, and application control functionalities. This comprehensive approach to security allows organizations to protect their networks from an array of cyber threats while simplifying management and reducing operational costs.

Another key characteristic of these models is their use of Fortinet's purpose-built security processing units (SPUs). These hardware-accelerated security chips enable accelerated threat detection and prevention, allowing the 5003 and 5003A to deliver high performance even when advanced security features are enabled. The SPUs play a crucial role in ensuring that organizations can enforce security policies without compromising on speed or efficiency.

Furthermore, the FortiGate 5003 and 5003A support advanced networking features, including Virtual Routing and Forwarding (VRF), which allows for better traffic management and segmentation. This capability is essential in multi-tenant environments, enabling organizations to create isolated networks while maintaining centralized security management.

In addition to their performance and feature set, both models support centralized management through Fortinet's FortiManager platform, providing a unified view of network security across multiple devices. This simplifies configuration, updates, and policy compliance, significantly reducing administrative overhead.

Finally, the FortiGate 5003 and 5003A are designed with redundancy and high availability in mind. They include failover capabilities and support for clustering, ensuring that network operations remain uninterrupted even in the event of hardware failure. This level of reliability is vital for mission-critical applications where downtime can lead to significant operational disruption.

In summary, Fortinet's FortiGate 5003 and 5003A are powerful solutions that combine high performance, advanced security technologies, and robust management features to meet the needs of large enterprises. With their focus on scalability and reliability, these firewalls are poised to protect organizations against evolving cyber threats while ensuring optimal network performance.