Default FortiLink aggregate interface configuration may not work

The FortiGate-6000 and 7000 default configurations include an 802.3 aggregate interface named fortilink, intended to be used to connect to one or more managed FortiSwitches. To use this interface to connect to managed FortiSwitches you must add one or more interfaces to the aggregate interface and then connect your FortiSwitches to these interfaces.

Example fortilink interface configuration:

config system interface

edit fortilink

set vdom <vdom>

set fortilink enable

set ip <ip-address>

set allowaccess ping fabric

set type aggregate

set member <interfaces>

set lldp-reception enable

set lldp-transmission enable

set auto-auth-extension-device enable

set lacp-mode static

end

For this configuration to work lacp-mode must be set to static.

If you have problems with the fortilink interface, you should verify that lacp-mode is set to static. For example, if you have reset your FortiGate-6000 or 7000 to factory defaults, lacp-mode may get reset to active. If this happens, just change the setting back to static.