How to set up your FortiWAN
Configuring Network Interface (Network Setting)
Redundant LAN/DMZ Port and Aggregated LAN/DMZ Port
Why redundant LAN port and redundant DMZ port are necessary? Because without these two ports, when FortiWAN is
working in HA mode, single point failure can still occur over links connecting LAN/DMZ and LAN/DMZ ports on
FortiWAN. FortiWAN bridges the connections of redundant LAN port and redundant DMZ port. It supports the
Spanning Tree algorithm and sets the highest 0xffff as bridge priority. The configurations thus manage to avoid
network failure caused by the possible packet looping.
As for aggregated LAN/DMZ port, the aggregation of both ports can be used to increase 1x bandwidth, while also offer
HA backup support (fail over). It supports IEEE 802.3ad active mode and the related parameters are sat as follows:
Parameter
Value
Note
ad_select
stable
as default
all_slave_active
0
as default
downdelay
0
as default
lacp_rate
slow
as default
max_bonds
1
as default
miimon
100
as recommended
min_links
0
as default
updelay
0
as default
use_carrier
1
as default
xmit_hash_policy
layer2
as default
Note that ports that are aggregated or redundant to each other must be equal in port speed and duplex (See "
").
Configure the setting
Label
The logical label of the redundant LAN/DMZ or aggregated LAN/DMZ port pair
that is grouped by a selection of two ports. The label is used for later reference in
other configurations (for specifying the LAN port and DMZ port pull-down menus
for private LAN Subnet, subnet in DMZ and subnet in WAN and DMZ, see "
").
The label can only contain letters of “0-9 a-z A-Z .-_”, and will display in LAN
settings as one option. After applying the settings, the defined label names are
displayed in the related pull-down menus in the formats: "
Bonding: label name
"
for an aggregated port, and "
Bridge: label name
" for a redundant port.
Mapping
Select two LAN/DMZ ports and group them as redundant LAN/DMZ or aggreg-
ated LAN/DMZ port pair.
52
FortiWAN Handbook
Fortinet Technologies Inc.
