Fortinet black logo

Perform link health check

Copy Link
Copy Doc ID f815156d-f108-11e9-8977-00505692583a:409651
Download PDF

Perform link health check

Health checks can be performed on all types of links. The following example shows a health check configuration on top of two IPSec VPN links, “fcs-0-phase-1” and “fcs-1- phase-1”, respectively.

Use hmon hchk to send probes to a specific target to measure:

  • The maximum, minimum, or average latency for a given period.
  • The maximum, minimum, or average packet loss rate for a given period.
  • The latency variation (jitter) for a given period.

Paramerter

Descriptions

set protocol {ping | http | dns}

The protocol used for status check.

set port

The port number used to communicate with the server. Valid range is 1 - 65535. The default is 80.

set http-get

The URL used to communicate with the server. The default is /.

*interface <interface_name>

The name of the interface.

interval

The monitoring interval in seconds. The valid range is 1–3600. The default is 5.

probe_cnt

The number of probes sent within the interval. The valid range is 1–10. The default is 1.

probe_tm

The timeout for a probe in seconds. The valid range is 1–10. The default is 2.

*probe_target

The target to which a probe is sent.

src_iface

The source address derived from the specified interface.

filter {rtt | loss}

Filter by

  • rtt—Round Trip Time.
  • loss—Packet loss.
Example health monitor health check configurations:
config hmon hchk
edit fcs-0-phase-1-chk
    set protocol ping
        set interval 10
        set probe_cnt 5
        set probe_tm 2
        set probe_target 34.207.95.79
        set interface fcs-0-phase-1
        set src_iface lan
        set filter loss rtt
    next
edit fcs-1-phase-1-chk
    set protocol ping
        set interval 10
        set probe_cnt 5
        set probe_tm 2
        set probe_target 34.207.95.79
        set interface fcs-1-phase-1
        set src_iface lan
        set filter loss rtt
    next
end

You can get the health check status for the above configurations using the following command:

FX04DA5918004433 # get hmon hchk fcs-0-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-0-phase-1:  141.00ms 151.62ms 127.73ms 132.06ms   7.28ms     19.4
  packet loss:       avg      max      min      now
fcs-0-phase-1:        0%       0%       0%       0%

FX04DA5918004433 # get hmon hchk fcs-1-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-1-phase-1:  121.27ms 133.56ms 108.98ms 115.86ms 8.49ms 14.3
  packet loss:       avg      max      min      now
fcs-1-phase-1:        0%       0%       0%       0%

Perform link health check

Health checks can be performed on all types of links. The following example shows a health check configuration on top of two IPSec VPN links, “fcs-0-phase-1” and “fcs-1- phase-1”, respectively.

Use hmon hchk to send probes to a specific target to measure:

  • The maximum, minimum, or average latency for a given period.
  • The maximum, minimum, or average packet loss rate for a given period.
  • The latency variation (jitter) for a given period.

Paramerter

Descriptions

set protocol {ping | http | dns}

The protocol used for status check.

set port

The port number used to communicate with the server. Valid range is 1 - 65535. The default is 80.

set http-get

The URL used to communicate with the server. The default is /.

*interface <interface_name>

The name of the interface.

interval

The monitoring interval in seconds. The valid range is 1–3600. The default is 5.

probe_cnt

The number of probes sent within the interval. The valid range is 1–10. The default is 1.

probe_tm

The timeout for a probe in seconds. The valid range is 1–10. The default is 2.

*probe_target

The target to which a probe is sent.

src_iface

The source address derived from the specified interface.

filter {rtt | loss}

Filter by

  • rtt—Round Trip Time.
  • loss—Packet loss.
Example health monitor health check configurations:
config hmon hchk
edit fcs-0-phase-1-chk
    set protocol ping
        set interval 10
        set probe_cnt 5
        set probe_tm 2
        set probe_target 34.207.95.79
        set interface fcs-0-phase-1
        set src_iface lan
        set filter loss rtt
    next
edit fcs-1-phase-1-chk
    set protocol ping
        set interval 10
        set probe_cnt 5
        set probe_tm 2
        set probe_target 34.207.95.79
        set interface fcs-1-phase-1
        set src_iface lan
        set filter loss rtt
    next
end

You can get the health check status for the above configurations using the following command:

FX04DA5918004433 # get hmon hchk fcs-0-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-0-phase-1:  141.00ms 151.62ms 127.73ms 132.06ms   7.28ms     19.4
  packet loss:       avg      max      min      now
fcs-0-phase-1:        0%       0%       0%       0%

FX04DA5918004433 # get hmon hchk fcs-1-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-1-phase-1:  121.27ms 133.56ms 108.98ms 115.86ms 8.49ms 14.3
  packet loss:       avg      max      min      now
fcs-1-phase-1:        0%       0%       0%       0%