Tuesday, December 8, 2015

Fortigate Aggregate Ethernet interface LB-algo DIAG

In this post we will look at how you can configure a Aggregate Ethernet interface and check load-balance algorithm.  The configure for a simple  two port ether bundle should look similar to the following;



Once you have the members up, you can check load-balance for determining what member the traffic will be present on by using mac , ipv4/ipv6 address and/or protocol a few other options.

Here's ipv4 load-balance validation by using src/dst ipv4 address.




Here's ipv4 load-balance validation by using src/dst mac address.


Here's ipv4 load-balance validation by using src/dst ipv4 address plus protocol.


Ken Felix
NSE ( network security expert) and Route/Switching Engineer
kfelix  -----a----t---- socpuppets ---dot---com

     ^      ^
=(  @  @ )=
         o 
        /  \

No comments:

Post a Comment