一、端口聚合(LACP)应用场景
该功能高端设备上支持,FortiGate60D、FortiGate90D和FortiGate240D等低端型号不支持。
1、在带宽比较紧张的情况下,可以通过逻辑聚合可以扩展带宽到原链路的n倍
2、在需要对链路进行动态备份的情况下,可以通过配置链路聚合实现同一聚合组各个成员端口之间彼此动态备份。
二、端口聚合(LACP)模式
LACP的端口可以支持如下几种模式:static(静态),passive,和active
静态:人为配置的聚合组,不允许系统自动添加或删除手工或静态聚合端口。
passive:被动模式,该模式下端口不会主动发送LACPDU报文,在接收到对端发送的LACP报文后,该端口进入协议计算状态。
Active:主动模式,该模式下端口会主动向对端发送LACPDU报文,进行LACP协议的计算。
一般建议对接的2台设备一边为active,另一边为 passive。
三、端口聚合(LACP)配置
步骤一、添加聚合口
配置页面:网络>>接口>>新建
类型选择: 802.3ad聚合;选择物理接口成员;
注意:建议在不需要的情况下关闭接口配置下的“设备探测”(Device detection)功能,该功能用于MAC地址厂商设备信息识别及MAC地址过滤,会消耗较多的设备资源。
步骤二、修改LACP
FortiGate # config system interface
FortiGate (interface) # edit agg2
FortiGate (lacp) # set lacp-mode static //配置LACP协商模式: 主动,被动或者静态,默认为动态
FortiGate (lacp) # set algorithm L3 //负载均衡算法。L3 基于IP地址进行哈希,L4 基于四层进行哈希。
FortiGate (lacp) # end
配置完成后查看配置聚合口配置,接口配置页面查看建立的软交换口
说明:对应的物理口在WEB/CLI界面上将消失,不可配置;
查看命令
FortiGate # show system interface agg2
config system interface
edit "agg2"
set vdom "root"
set type aggregate
set member "port9" "port10"
set description " "
set snmp-index 51
set lacp-mode static
set algorithm L3
next
end
说明:以上查看的配置命令,既是命令行下配置的逻辑和参考
四、查看LACP接口状态
FortiGate # diagnose netlink aggregate list
List of 802.3ad link aggregation interfaces:
1 name agg2 status up algorithm L3 lacp-mode static
FortiGate # diagnose netlink aggregate name agg2
LACP flags: (A|P)(S|F)(A|I)(I|O)(E|D)(E|D)
(A|P) - LACP mode is Active or Passive
(S|F) - LACP speed is Slow or Fast
(A|I) - Aggregatable or Individual
(I|O) - Port In sync or Out of sync
(E|D) - Frame collection is Enabled or Disabled
(E|D) - Frame distribution is Enabled or Disabled
status: up
npu: y
flush: n
asic helper: y
oid: 135
ports: 2
ha: master
distribution algorithm: L4
LACP mode: active
LACP speed: slow
LACP HA: enable
aggregator ID: 1
actor key: 17
actor MAC address: 14:14:4b:7e:e1:69
partner key: 17
partner MAC address: 14:14:4b:7e:e1:67
slave: port9
link status: up
link failure count: 0
permanent MAC addr: 14:14:4b:7e:e1:69
LACP state: established
actor state: ASAIEE //本端状态
actor port number/key/priority: 1 17 255
partner state: ASAIEE //对端状态
partner port number/key/priority: 1 17 255
partner system: 65535 14:14:4b:7e:e1:67
aggregator ID: 1
speed/duplex: 1000 1
RX state: CURRENT 6
MUX state: COLLECTING_DISTRIBUTING 4
slave: port10
link status: up
link failure count: 0
permanent MAC addr: 14:14:4b:7e:e1:68
LACP state: established
actor state: ASAIEE
actor port number/key/priority: 2 17 255
partner state: ASAIEE
partner port number/key/priority: 2 17 255
partner system: 65535 14:14:4b:7e:e1:67
aggregator ID: 1
speed/duplex: 1000 1
RX state: CURRENT 6
MUX state: COLLECTING_DISTRIBUTING 4