Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.4.2
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    firewall shaper traffic-shaper

    Configure shared traffic shaper.

      config firewall shaper traffic-shaper
      Description: Configure shared traffic shaper.
      edit <name>
          set guaranteed-bandwidth {integer}
          set maximum-bandwidth {integer}
          set bandwidth-unit [kbps|mbps|...]
          set priority [low|medium|...]
          set per-policy [disable|enable]
          set diffserv [enable|disable]
          set diffservcode {user}
          set dscp-marking-method [multi-stage|static]
          set exceed-bandwidth {integer}
          set exceed-dscp {user}
          set maximum-dscp {user}
          set overhead {integer}
          set exceed-class-id {integer}
      next
  end

    config firewall shaper traffic-shaper

    Parameter Name Description Type Size
    guaranteed-bandwidth Amount of bandwidth guaranteed for this shaper (0 - 16776000). Units depend on the bandwidth-unit setting. integer Minimum value: 0 Maximum value: 16776000
    maximum-bandwidth Upper bandwidth limit enforced by this shaper (0 - 16776000). 0 means no limit. Units depend on the bandwidth-unit setting. integer Minimum value: 0 Maximum value: 16776000
    bandwidth-unit Unit of measurement for guaranteed and maximum bandwidth for this shaper (Kbps, Mbps or Gbps).
    kbps: Kilobits per second.
    mbps: Megabits per second.
    gbps: Gigabits per second.
    		 option -
    priority Higher priority traffic is more likely to be forwarded without delays and without compromising the guaranteed bandwidth.
    low: Low priority.
    medium: Medium priority.
    high: High priority.
    		 option -
    per-policy Enable/disable applying a separate shaper for each policy. For example, if enabled the guaranteed bandwidth is applied separately for each policy.
    disable: All referring policies share one traffic shaper.
    enable: Each referring policy has its own traffic shaper.
    		 option -
    diffserv Enable/disable changing the DiffServ setting applied to traffic accepted by this shaper.
    enable: Enable setting traffic DiffServ.
    disable: Disable setting traffic DiffServ.
    		 option -
    diffservcode DiffServ setting to be applied to traffic accepted by this shaper. user Not Specified
    dscp-marking-method Select DSCP marking method.
    multi-stage: Multistage marking.
    static: Static marking.
    		 option -
    exceed-bandwidth Exceed bandwidth used for DSCP multi-stage marking. Units depend on the bandwidth-unit setting. integer Minimum value: 0 Maximum value: 16776000
    exceed-dscp DSCP mark for traffic in [guaranteed-bandwidth, exceed-bandwidth]. user Not Specified
    maximum-dscp DSCP mark for traffic in [exceed-bandwidth, maximum-bandwidth]. user Not Specified
    overhead Per-packet size overhead used in rate computations. integer Minimum value: 0 Maximum value: 100
    exceed-class-id Class ID for traffic in [guaranteed-bandwidth, maximum-bandwidth]. integer Minimum value: 0 Maximum value: 4294967295
    Previous
    Next

    firewall shaper traffic-shaper

    Configure shared traffic shaper.

      config firewall shaper traffic-shaper
      Description: Configure shared traffic shaper.
      edit <name>
          set guaranteed-bandwidth {integer}
          set maximum-bandwidth {integer}
          set bandwidth-unit [kbps|mbps|...]
          set priority [low|medium|...]
          set per-policy [disable|enable]
          set diffserv [enable|disable]
          set diffservcode {user}
          set dscp-marking-method [multi-stage|static]
          set exceed-bandwidth {integer}
          set exceed-dscp {user}
          set maximum-dscp {user}
          set overhead {integer}
          set exceed-class-id {integer}
      next
  end

    config firewall shaper traffic-shaper

    Parameter Name Description Type Size
    guaranteed-bandwidth Amount of bandwidth guaranteed for this shaper (0 - 16776000). Units depend on the bandwidth-unit setting. integer Minimum value: 0 Maximum value: 16776000
    maximum-bandwidth Upper bandwidth limit enforced by this shaper (0 - 16776000). 0 means no limit. Units depend on the bandwidth-unit setting. integer Minimum value: 0 Maximum value: 16776000
    bandwidth-unit Unit of measurement for guaranteed and maximum bandwidth for this shaper (Kbps, Mbps or Gbps).
    kbps: Kilobits per second.
    mbps: Megabits per second.
    gbps: Gigabits per second.
    		 option -
    priority Higher priority traffic is more likely to be forwarded without delays and without compromising the guaranteed bandwidth.
    low: Low priority.
    medium: Medium priority.
    high: High priority.
    		 option -
    per-policy Enable/disable applying a separate shaper for each policy. For example, if enabled the guaranteed bandwidth is applied separately for each policy.
    disable: All referring policies share one traffic shaper.
    enable: Each referring policy has its own traffic shaper.
    		 option -
    diffserv Enable/disable changing the DiffServ setting applied to traffic accepted by this shaper.
    enable: Enable setting traffic DiffServ.
    disable: Disable setting traffic DiffServ.
    		 option -
    diffservcode DiffServ setting to be applied to traffic accepted by this shaper. user Not Specified
    dscp-marking-method Select DSCP marking method.
    multi-stage: Multistage marking.
    static: Static marking.
    		 option -
    exceed-bandwidth Exceed bandwidth used for DSCP multi-stage marking. Units depend on the bandwidth-unit setting. integer Minimum value: 0 Maximum value: 16776000
    exceed-dscp DSCP mark for traffic in [guaranteed-bandwidth, exceed-bandwidth]. user Not Specified
    maximum-dscp DSCP mark for traffic in [exceed-bandwidth, maximum-bandwidth]. user Not Specified
    overhead Per-packet size overhead used in rate computations. integer Minimum value: 0 Maximum value: 100
    exceed-class-id Class ID for traffic in [guaranteed-bandwidth, maximum-bandwidth]. integer Minimum value: 0 Maximum value: 4294967295
    Previous
    Next