FortiGate防火墙HA下联堆叠交换机

时间:2022-04-21 17:10:10

1.拓扑图

  FortiGate防火墙HA下联堆叠交换机

2.防火墙配置

 FortiGate防火墙HA下联堆叠交换机

3.交换机配置

interface GigabitEthernet1/0/47

switchport access vlan 30

switchport mode access

channel-protocol lacp

channel-group 31 mode active

interface GigabitEthernet2/0/47

switchport access vlan 30

switchport mode access

channel-protocol lacp

channel-group 31 mode active

interface GigabitEthernet1/0/48

switchport access vlan 30

switchport mode access

channel-protocol lacp

channel-group 30 mode active

interface GigabitEthernet2/0/48

switchport access vlan 30

switchport mode access

channel-protocol lacp

channel-group 30 mode active

interface Port-channel30

switchport access vlan 30

switchport mode access

interface Port-channel31

switchport access vlan 30

switchport mode access

interface Vlan30

ip address 10.10.30.2 255.255.255.0

即,使用交叉上联

4.若不交叉,即交换机上联到主、备墙的端口在同一etherchannel下并在同一vlan下。那么连接备墙的交换机端口会显示为橙色,而且断开监控端口线的话,会跳到备机,但是网不通。同时,拔掉心跳线会导致丢包和高延迟

 FortiGate防火墙HA下联堆叠交换机