06-15-2020 09:06 AM - edited 06-15-2020 09:13 AM
Hello,
We want to know if its possible to create a port-channel between two Nexus 9364 and a fortigate using the vPC feature.
In case that is it possible,
What we have to take in consideration in order to implement this design?
It can be a Layer 3 Port Channel?
Do we have to make any change at Spanning tree protocol?
Is it recommended?? or it can be better to implement two Layer 3 link from the fortigate to each Nexus??
BelowI share what the physical topology would look like and how the connections would look logically.
PHYSICAL TOPOLOGY
LOGICAL TOPOLOGY
06-15-2020 09:32 AM
Hi,
Not sure if this is possible using a PO. Depending on what Fortigate supports, you may want to aggregate the 2 interfaces together and than use a transit vlan with a /28 subnet spanning both Nexus and the Fortigate switch.
So, Fortigate switch one IP and each Nexus one IP for a total of 3.
HTH
06-25-2020 11:00 PM
In that scenario the fortigate would form adjacency with each nexus Switch creating ECMP routing what I think is good.
06-26-2020 08:21 AM
In that scenario the fortigate would form adjacency with each nexus Switch creating ECMP routing what I think is good.
That is correct. The Fortigate peers with both Nexus switches.
HTH
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide