Fortinet 5003A Fabric And Base Backplane Communications Manual page 34

Fabric channel layer-2 link aggregation
34
Because the FortiGate-5000 boards in a link aggregation configuration operate in
transparent mode, any routing, VPN or NAT requirements should be handed by an
external device (such as a router), before or after the traffic reaches the
FortiSwitch-5003A board.
If the traffic that you are distributing contains VLAN-tagged packets, you must add
the VLAN tags to the FortiSwitch-5003A interfaces and to the trunks that will
handle the VLAN-tagged traffic.
Figure shows a basic link aggregation configuration using a single
FortiSwitch-5003A board. In this configuration the external switch is connected to
the FortiSwitch-5003A F7 front panel interface. The external switch adds VLAN
tags to traffic from the internal and external networks. Packets from the internal
network are tagged as 100 and packets from the external network are tagged as
101.
Note: LInk aggregation does not require FortiGate-RTM-XB2 modules. If the example in
Figure did not include FortiGate-RTM-XB2 modules the configuration steps would be the
same and link aggregation would still function the same way. The only difference is without
the FortiGate-RTM-XB2 modules communication on the fabric channel would be 1Gbps
instead of 10 Gbps.
Figure 14: Fabric channel layer-2 link aggregation configuration
External
Network
Internal and external
External switch
10-gigabit networks
connected to
FortiSwitch-5003A
VLAN
front panel interface F7
tagged
and to fabric channel 1
traffic
13 11 9 7 5
FILTER
0 FA N T R AY
Distributed 10-gigabit
data communication
on fabric channel 1
FortiSwitch-5003A and 5003 Fabric and Base Backplane Communications Guide
FortiGate-5140 fabric backplane communication
Internal Network
5140SAP
SERIAL 1 SERIAL 2 ALARM
5140
3 1 2 4 6 8 10 12 14
ETH0 ETH1
ETH0
Service
RESET
STATUS
Hot Swap
1 2
ETH0 ETH1
ETH0
Service
RESET
STATUS
Hot Swap
1 FA N T R AY 2 FA N T R AY
Six FortiGate-RTM-XB2
modules installed in RTM
slots 6, 8, 9, 10, 11, and
13 to provide 10-gigabit
fabric interfaces and
NP2 acceleration for each
FortiGate-5001A board
01-30000-85717-20081205