Creating a LAG for FGSP session synchronization

The FortiGate-7000F supports creating a LAG consisting of the M1 and M2 or the M3 and M4 interfaces of one or both FIMs to increase the FGSP session synchronization bandwidth capacity or to distribute session synchronization traffic between both FIMs and provide redundancy. You can create a LAG of 100G interfaces using the M1 and M2 interfaces of one or both FIMs. You can create a LAG of 10G interfaces using the M3 and M4 interfaces of one or both FIMs. Choose the interfaces for the LAG depending on your session synchronization bandwidth requirements and the other uses you might have for the M1 to M4 interfaces.

Example LAG configuration using the M1 interfaces of both FIMs.

config system interface

edit sess-sync-lag

set vdom mgmt-vdom

set ip 10.1.1.1 255.255.255.0

set type aggregate

set member 1-M1 2-M1

end

Example cluster sync configuration:

config system cluster-sync

edit 1

set peervd mgmt-vdom

set peerip 10.1.1.2

set syncvd <vdoms >

end

Example HA configuration:

config system ha

set session-pickup enable

set session-pickup-connectionless enable

set session-pickup-expectation enable

set session-pickup-nat enable

end