Fortinet white logo
Fortinet white logo

Admin Guide (Standalone)

Perform link health check

Perform link health check

Health checks can be performed on all types of links. The following example shows a health check configuration on top of two IPSec VPN links, “fcs-0-phase-1” and “fcs-1- phase-1”, respectively.

Use hmon hchk to send probes to a specific target to measure:

  • The maximum, minimum, or average latency for a given period.
  • The maximum, minimum, or average packet loss rate for a given period.
  • The latency variation (jitter) for a given period.

Paramerter

Descriptions

protocol {ping | http | dns}

The protocol used for status check.

interval

The monitoring interval in seconds. The valid value range is 1—3600; the default is 5.

probe-cnt

The number of probes sent within the interval. The valid range is 1—10; the default is 1.

probe-tm

The timeout for a probe in seconds. The valid value range is 1—10; the default is 2.

*probe-target

The target to which a probe is sent.

port

The port number used to communicate with the server. The valid value range is 165535; the default is 80.

http-get

The URL used to communicate with the server. The default is /.

*interface

The outbound interface of probe packets.

src-type {none | interface | ip}

Specify the way to set the source address for probes.

src-iface

Set the source address as the address derived from the specified interface.

src-ip

Set the source address as a specific IP.

filter {rtt | loss}

Specify the desired filter.

Example health monitor health check configurations:
config hmon hchk
    edit fcs-0-phase-1-chk
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 34.207.95.79
        set interface fcs-0-phase-1
        set src-type interfce
        set src-iface lan
        set filter rtt loss
    next
    edit fcs-1-phase-1-chk
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 34.207.95.79
        set interface fcs-1-phase-1
        set src-type interfce
        set src-iface lan
        set filter rtt loss
    next
end

You can get the health check status for the above configurations using the following command:

FX04DA5918004433 # get hmon hchk fcs-0-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-0-phase-1:  141.00ms 151.62ms 127.73ms 132.06ms   7.28ms     19.4
  packet loss:       avg      max      min      now
fcs-0-phase-1:        0%       0%       0%       0%

FX04DA5918004433 # get hmon hchk fcs-1-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-1-phase-1:  121.27ms 133.56ms 108.98ms 115.86ms 8.49ms 14.3
  packet loss:       avg      max      min      now
fcs-1-phase-1:        0%       0%       0%       0%

Perform link health check

Perform link health check

Health checks can be performed on all types of links. The following example shows a health check configuration on top of two IPSec VPN links, “fcs-0-phase-1” and “fcs-1- phase-1”, respectively.

Use hmon hchk to send probes to a specific target to measure:

  • The maximum, minimum, or average latency for a given period.
  • The maximum, minimum, or average packet loss rate for a given period.
  • The latency variation (jitter) for a given period.

Paramerter

Descriptions

protocol {ping | http | dns}

The protocol used for status check.

interval

The monitoring interval in seconds. The valid value range is 1—3600; the default is 5.

probe-cnt

The number of probes sent within the interval. The valid range is 1—10; the default is 1.

probe-tm

The timeout for a probe in seconds. The valid value range is 1—10; the default is 2.

*probe-target

The target to which a probe is sent.

port

The port number used to communicate with the server. The valid value range is 165535; the default is 80.

http-get

The URL used to communicate with the server. The default is /.

*interface

The outbound interface of probe packets.

src-type {none | interface | ip}

Specify the way to set the source address for probes.

src-iface

Set the source address as the address derived from the specified interface.

src-ip

Set the source address as a specific IP.

filter {rtt | loss}

Specify the desired filter.

Example health monitor health check configurations:
config hmon hchk
    edit fcs-0-phase-1-chk
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 34.207.95.79
        set interface fcs-0-phase-1
        set src-type interfce
        set src-iface lan
        set filter rtt loss
    next
    edit fcs-1-phase-1-chk
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 34.207.95.79
        set interface fcs-1-phase-1
        set src-type interfce
        set src-iface lan
        set filter rtt loss
    next
end

You can get the health check status for the above configurations using the following command:

FX04DA5918004433 # get hmon hchk fcs-0-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-0-phase-1:  141.00ms 151.62ms 127.73ms 132.06ms   7.28ms     19.4
  packet loss:       avg      max      min      now
fcs-0-phase-1:        0%       0%       0%       0%

FX04DA5918004433 # get hmon hchk fcs-1-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-1-phase-1:  121.27ms 133.56ms 108.98ms 115.86ms 8.49ms 14.3
  packet loss:       avg      max      min      now
fcs-1-phase-1:        0%       0%       0%       0%