Friday, January 11, 2013

Bridge aggriation group with Lacp



Core switch : 
1.   Create the bridge aggriation group
2.   Apply the link aggregation settings (link-aggregation mode dynamic &
mad enable)
3.   Then log into the switch interface where you are going to construct the LACP.On plain interface shutdown and add the interface the to the LACP group
eg: link-aggregation group 1. once you add all the interface into the group individually un-shut the ports.
4.   Execute the command : disp link-aggregation verbose bridge-aggregation <group no.> to see whether the ports are selected.
5.   Once the Switch end configuration of the above steps are completed you have to convert the bridge to trunk by executing the command
: Int br 1
:port link-type trunk
: port trunk per vl <Vlan ID>

Access Switch :

1.   Create the bridge aggriation group
2.   Apply the link aggregation settings (link-aggregation mode dynamic )
3.   Then log into the switch interface where you are going to construct the LACP.On plain interface shutdown and add the interface the to the LACP group
eg: link-aggregation group 1. once you add all the interface into the group individually un-shut the ports.
4.   Execute the command : disp link-aggregation verbose bridge-aggregation <group no.> to see whether the ports are selected.
5.   Excecute the below command on the bridge to conver the link to trunk ans allow the vlan for accessibility.
: Int br 1
:port link-type trunk
: port trunk per vl <Vlan ID>



Core devices
interface                                                                                               
description ****CONNECTED TO ****
port link-type trunk
port trunk permit vlan 1 300
link-aggregation mode dynamic
mad enable
============================

Access devices Configuration

interface Bridge-Aggregation1
port link-type trunk
port trunk permit vlan 1 300
link-aggregation mode dynamic

Optimization of fortigate IPS

IPS signature need select according to infrastructure environment  Eg:-  if  we are not have Linux servers this ips signature can disable (d...