Fortinet Document Library

Version:

Version:


Table of Contents

Admin Guide (Standalone)

Download PDF
Copy Link

Perform link health check

Health checks can be performed on all types of links. The following example shows a health check configuration on top of two IPSec VPN links, “fcs-0-phase-1” and “fcs-1- phase-1”, respectively.

Use hmon hchk to send probes to a specific target to measure:

  • The maximum, minimum, or average latency for a given period.
  • The maximum, minimum, or average packet loss rate for a given period.
  • The latency variation (jitter) for a given period.

Paramerter

Descriptions

protocol {ping | http | dns}

The protocol used for status check.

interval

The monitoring interval in seconds. The valid value range is 1—3600; the default is 5.

probe-cnt

The number of probes sent within the interval. The valid range is 1—10; the default is 1.

probe-tm

The timeout for a probe in seconds. The valid value range is 1—10; the default is 2.

*probe-target

The target to which a probe is sent.

port

The port number used to communicate with the server. The valid value range is 165535; the default is 80.

http-get

The URL used to communicate with the server. The default is /.

*interface

The outbound interface of probe packets.

src-type {none | interface | ip}

Specify the way to set the source address for probes.

src-iface

Set the source address as the address derived from the specified interface.

src-ip

Set the source address as a specific IP.

filter {rtt | loss}

Specify the desired filter.

Example health monitor health check configurations:
config hmon hchk
    edit fcs-0-phase-1-chk
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 34.207.95.79
        set interface fcs-0-phase-1
        set src-type interfce
        set src-iface lan
        set filter rtt loss
    next
    edit fcs-1-phase-1-chk
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 34.207.95.79
        set interface fcs-1-phase-1
        set src-type interfce
        set src-iface lan
        set filter rtt loss
    next
end

You can get the health check status for the above configurations using the following command:

FX04DA5918004433 # get hmon hchk fcs-0-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-0-phase-1:  141.00ms 151.62ms 127.73ms 132.06ms   7.28ms     19.4
  packet loss:       avg      max      min      now
fcs-0-phase-1:        0%       0%       0%       0%

FX04DA5918004433 # get hmon hchk fcs-1-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-1-phase-1:  121.27ms 133.56ms 108.98ms 115.86ms 8.49ms 14.3
  packet loss:       avg      max      min      now
fcs-1-phase-1:        0%       0%       0%       0%

Perform link health check

Health checks can be performed on all types of links. The following example shows a health check configuration on top of two IPSec VPN links, “fcs-0-phase-1” and “fcs-1- phase-1”, respectively.

Use hmon hchk to send probes to a specific target to measure:

  • The maximum, minimum, or average latency for a given period.
  • The maximum, minimum, or average packet loss rate for a given period.
  • The latency variation (jitter) for a given period.

Paramerter

Descriptions

protocol {ping | http | dns}

The protocol used for status check.

interval

The monitoring interval in seconds. The valid value range is 1—3600; the default is 5.

probe-cnt

The number of probes sent within the interval. The valid range is 1—10; the default is 1.

probe-tm

The timeout for a probe in seconds. The valid value range is 1—10; the default is 2.

*probe-target

The target to which a probe is sent.

port

The port number used to communicate with the server. The valid value range is 165535; the default is 80.

http-get

The URL used to communicate with the server. The default is /.

*interface

The outbound interface of probe packets.

src-type {none | interface | ip}

Specify the way to set the source address for probes.

src-iface

Set the source address as the address derived from the specified interface.

src-ip

Set the source address as a specific IP.

filter {rtt | loss}

Specify the desired filter.

Example health monitor health check configurations:
config hmon hchk
    edit fcs-0-phase-1-chk
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 34.207.95.79
        set interface fcs-0-phase-1
        set src-type interfce
        set src-iface lan
        set filter rtt loss
    next
    edit fcs-1-phase-1-chk
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 34.207.95.79
        set interface fcs-1-phase-1
        set src-type interfce
        set src-iface lan
        set filter rtt loss
    next
end

You can get the health check status for the above configurations using the following command:

FX04DA5918004433 # get hmon hchk fcs-0-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-0-phase-1:  141.00ms 151.62ms 127.73ms 132.06ms   7.28ms     19.4
  packet loss:       avg      max      min      now
fcs-0-phase-1:        0%       0%       0%       0%

FX04DA5918004433 # get hmon hchk fcs-1-phase-1
   median rtt:       avg      max      min      now       sd     am/s
fcs-1-phase-1:  121.27ms 133.56ms 108.98ms 115.86ms 8.49ms 14.3
  packet loss:       avg      max      min      now
fcs-1-phase-1:        0%       0%       0%       0%