Fortigate UTM + XGS2230 Stack Nebula not work

tczauderna
tczauderna Posts: 30  Freshman Member
Zyxel Certified Network Administrator - WLAN Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula
edited April 8 in Nebula

I have a problem

I have already reported it to support but while waiting for an answer maybe someone already knows the solution.
Namely I have a set of UTM Fortigate + 2x XGS2230 switches connected in a stack.
And I wanted to set LACP between UTM and the switch stack in ports 1/48 2/48.
The switches are connected to nebula.
Unfortunately fortigate keeps changing LACP down. LACP with Synology works properly. That's why I'm asking on the forum how to set it up, probably mainly fortigate because you can see that nebula is limited :(
Configuration scheme for fortigate, the basic one

set vdom "root"

set type aggregate

set member "port1" "port2"

set description 'lacp_example'

set lacp-mode active

set lacp-ha-secondary disable

set lacp-speed slow

set algorithm L4

I tried to lower the algorithm to L2 but it didn't work. I'm still doing 2 iterations with lacp-speed

PCAP on fortigate doesn't return anything interesting but I'll try to squeeze something more

All Replies

  • Zyxel_Judy
    Zyxel_Judy Posts: 2,138  Zyxel Employee
    Zyxel Certified Network Engineer Level 2 - Nebula Zyxel Certified Network Engineer Level 2 - Switch Zyxel Certified Network Engineer Level 2 - Security Zyxel Certified Network Engineer Level 1 - Nebula
    edited April 10

    Hi @tczauderna ,

    We assume you're referring to the Zyxel XGS2220 switch (not XGS2230).

    Unfortunately fortigate keeps changing LACP down. LACP with Synology works properly. That's why I'm asking on the forum how to set it up.

    Do you mean "LACP between FortiGate UTM and the switch Synology works properly, and you want to know the way to configure LACP between FortiGate and Zyxel XGS2220"? If yes, please refer to this article for step-by-step instructions on configuring LACP on our switch.

    How to Configure Link Aggregation on Nebula switch? — Zyxel Community

    And I wanted to set LACP between UTM and the switch stack in ports 1/48 2/48.

    PCAP on fortigate doesn't return anything interesting

    It appears that the LACP configuration may not be properly set up on either the FortiGate device or the Zyxel XGS2220 switch, as not seeing any LACP packets on the FortiGate. Please verify that LACP is correctly enabled on both the FortiGate and switch ports.
    If you've confirmed that LACP is properly configured on both devices but still isn't functioning, please share the switch's tech-support file with us. This will help us verify whether the LACP configuration is correct.

Nebula Tips & Tricks