IMPORTANT
SNS 3.x versions have reached End of Maintenance since July 1st, 2024.
We recommend that you update your SNS firewalls to a version with maintenance to guarantee the protection of your infrastructure.
Converting an interface to link aggregation (LACP)
This feature is only available on SN510, SN710, SN910, SN2000, SN2100, SN3000, SN3100, SN6000, SN6100, SNi20 and SNi40 models.
The LACP (IEEE 802.3ad - Link Aggregation Control Protocol) feature allows improving the appliance’s bandwidth while maintaining a high level of availability (link redundancy). Several physical ports on an appliance can be grouped together to be considered a single logical interface. Therefore, by aggregating x links, it will be possible to set up a link of x times 1 Gbps or 10 Gbps between two appliances.
NOTE
Ensure that the remote appliances are using LACP.
NOTE
The use of stackable switches is recommended as this would allow link redundancy between both appliances.
Click on Add in the toolbar and select Convert to link aggregation (LACP).
An interface that is already in use in the configuration cannot be converted in aggregate form.
An interface converted in aggregate form becomes a virtual interface, allowing aggregation to be viewed and configured. The physical interface of this converted interface then becomes similar to any other interface added to the aggregate. These members are called “aggregated links”.
An interface converted in aggregate form keeps its settings. The converted interface will then have an additional tab called “Link aggregation (LACP)”. On the other hand, an interface that becomes an aggregate link loses its settings to inherit the configuration of the aggregate (except the name and Media settings).
Depending on the extension modules installed, the maximum possible aggregate is half of the total number of interfaces on the model. The maximum number of aggregated links is 8 interfaces, regardless of the model.
"Link aggregation (LACP)" Tab
Another way to include interfaces in an aggregation, apart from dragging and dropping, is to use the panel in this tab (Link aggregation (LACP)).
To move an available interface (interface that is not being used in the configuration) to the link aggregation, drag and drop it or use the red arrow in between both tables or double-click on the interface you wish to move.
To remove an interface from an aggregation, do the exact opposite.
Configuring an aggregated link
| Enable aggregated interface |
If this option is selected, the interface will become an “aggregated link”. All of these interfaces will then be considered one single logical interface.
If this option is not selected, the interface will be disabled and rendered unusable. In terms of use, this may correspond to an interface to be used in the near or distant future, but which is not active. An interface which has been disabled because it is not in use is an example of an additional security measure against intrusions. |
| Name |
Name of the interface. (See warning in the introduction to the section on Interfaces) |
| Physical port |
List of Ethernet ports in the aggregation (Example: (Port2) |
| Aggregated to the interface |
Name of the virtual, i.e., “aggregated” interface. |
Media
| Media |
Connection speed of the network. By default the firewall detects this automatically but you can enforce the use of a particular mode. The different speeds available are: "Automatic detection", "10 Mb Half duplex", "10 Mb Full duplex", "100 Mb Half duplex", "100 Mb Full duplex", "1 Gb Half duplex", "1 Gb Full duplex". Warning If the firewall is directly connected to an ADSL modem, you are advised to enforce the medium that you wish to use on the interface concerned. |