HPE limitations

For FortiOS 6.2.7 Build 7105, the host protection engine (HPE) can only be used to limit the total number of packets per host queue, only the following options work:

config system npu

config hpe

set all-protocol <rate>

set enable-shaper {disable | enable}

end

all-protocol <rate> limit to the total number of packets per host queue. The range is 1000 to 1000000000 pps.

For more information about the config hpe command, see config hpe.

You can exempt traffic from HPE rate limiting by setting its queue between 8 and 11 using the following command:

config system npu

config np-queues

See config np-queues for details about setting NP queues.