FortiGate防火墙HA下联堆叠交换机

1.拓扑图

  

2.防火墙配置

 

3.交换机配置

interface GigabitEthernet1/0/47

 switchport access vlan 30

 switchport mode access

 channel-protocol lacp

 channel-group 31 mode active

interface GigabitEthernet2/0/47

 switchport access vlan 30

 switchport mode access

 channel-protocol lacp

 channel-group 31 mode active

 

interface GigabitEthernet1/0/48

 switchport access vlan 30

 switchport mode access

 channel-protocol lacp

 channel-group 30 mode active

interface GigabitEthernet2/0/48

 switchport access vlan 30

 switchport mode access

 channel-protocol lacp

 channel-group 30 mode active

 

interface Port-channel30

 switchport access vlan 30

 switchport mode access

interface Port-channel31

 switchport access vlan 30

 switchport mode access

 

interface Vlan30

 ip address 10.10.30.2 255.255.255.0

即,使用交叉上联

4.若不交叉,即交换机上联到主、备墙的端口在同一etherchannel下并在同一vlan下。那么连接备墙的交换机端口会显示为橙色,而且断开监控端口线的话,会跳到备机,但是网不通。同时,拔掉心跳线会导致丢包和高延迟

 

  

  

  

  

  

  

  

  

  

  

原文地址:https://www.cnblogs.com/xinghen1216/p/10091232.html