Recording NP7 traffic shaping statistics

You can use the following command to record traffic shaper statistics for sessions offloaded to NP7 processors:

config system npu

set shaping-stats {disable | enable}

end

With this option enabled, FortiOS records traffic shaping statistics including the number of packets dropped and the number of bytes dropped by traffic shaping for sessions offloaded to NP7 processors.

To record traffic shaping statistics for offloaded NP7 sessions, the NP7 processors must be operating in policing traffic shaping mode. Enter the following command to enable policing mode:

config system npu

set default-qos-type policing

end

The FortiGate restarts after entering this command.

A configuration change that causes a FortiGate to restart can disrupt the operation of an FGCP cluster. If possible, you should make this configuration change to the individual FortiGates before setting up the cluster. If the cluster is already operating, you should temporarily remove the secondary FortiGate(s) from the cluster, change the configuration of the individual FortiGates and then re-form the cluster. You can remove FortiGate(s) from a cluster using the Remove Device from HA cluster button on the System > HA GUI page. For more information, see Disconnecting a FortiGate.

You can use the following command to see traffic shaping statistics for NP7 processors that include the packets and bytes dropped:

diagnose firewall shaper traffic-shaper list name 200M
name 200M
maximum-bandwidth 25600 KB/sec
guaranteed-bandwidth 0 KB/sec
current-bandwidth 0 B/sec
priority 2
overhead 0
tos ff
packets dropped 28623480
bytes dropped 14368986960