Recording NP7 traffic shaping statistics
You can use the following command to record traffic shaper statistics for sessions offloaded to NP7 processors:
config system npu
set shaping-stats {disable | enable}
end
With this option enabled, FortiOS records traffic shaping statistics including the number of packets dropped and the number of bytes dropped by traffic shaping for sessions offloaded to NP7 processors.
To record traffic shaping statistics for offloaded NP7 sessions, the NP7 processors must be operating in policing traffic shaping mode. Enter the following command to enable policing mode:
config system npu
set default-qos-type policing
end
The FortiGate restarts after entering this command.
|
A configuration change that causes a FortiGate to restart can disrupt the operation of an FGCP cluster. If possible, you should make this configuration change to the individual FortiGates before setting up the cluster. If the cluster is already operating, you should temporarily remove the secondary FortiGate(s) from the cluster, change the configuration of the individual FortiGates and then re-form the cluster. You can remove FortiGate(s) from a cluster using the Remove Device from HA cluster button on the System > HA GUI page. For more information, see Disconnecting a FortiGate. |
You can use the following command to see traffic shaping statistics for NP7 processors that include the packets and bytes dropped:
diagnose firewall shaper traffic-shaper list name 200M name 200M maximum-bandwidth 25600 KB/sec guaranteed-bandwidth 0 KB/sec current-bandwidth 0 B/sec priority 2 overhead 0 tos ff packets dropped 28623480 bytes dropped 14368986960