Fortinet black logo

Administration Guide

SD-WAN Network Monitor service

The SD-WAN Network Monitor service is a tool designed to determine upload and download speeds. Speed tests can be conducted either on-demand or according to a predetermined schedule, measuring upload and download speeds of up to 1 Gbps. The results of the tests can be used as reference for various applications, including the following:

  • Configuring the estimated bandwidth of an interface, which can be employed in conjunction with various WAN intelligence strategies. See Using speed test results with SD-WAN for more information.

  • Configuring the inbandwidth and outbandwidth of an interface for use in traffic shaping. See Using speed test results with traffic shaping for more information.

  • Applying the speed test to dialup VPN tunnels in a hub and spoke deployment to conduct traffic shaping.

FortiOS offers a variety of methods for testing SD-WAN speed. The following table provides a brief overview of each method and guidance on when it might be most advantageous to use one method over the others.

Service

Overview

License

CLI speed test

  • Provides the most flexibility and options, which enables the speed test to operate with user-defined parameters.
  • Results can be used as reference to manually add to the interface's estimated bandwidth, or inbandwidth and outbandwidth.
  • Server is on the cloud, which is maintained by Fortinet.

Requires a valid SD-WAN Network Monitor license.

GUI speed test

  • Downloads the speed test server list automatically.
  • Results can be added to the interface's estimated bandwidth with one click.
  • Results are automatically updated in the interface measured-upstream-bandwidth and measured-downstream-bandwidth fields.
  • Results can be used as a reference to manually configure an interface’s inbandwidth and outbandwidth.
  • Easier to use.
  • Server is on the cloud, which is maintained by Fortinet.

Requires a valid SD-WAN Network Monitor license.

Scheduled interface speed test

  • Speed tests can be scheduled to run automatically.
  • Results are automatically updated in the interface measured-upstream-bandwidth and measured-downstream-bandwidth fields.
  • Results can be used as a reference to manually configure an interface’s inbandwidth and outbandwidth.
  • Possible to temporarily bypass the bandwidth limits set on the interface and configure custom maximum bandwidth limits.
  • Server is on the cloud, which is maintained by Fortinet.

Requires a valid SD-WAN Network Monitor license.

Speed test from hub to spoke

  • Server is the spoke.
  • Tests initiated from the hub.
  • Results are cached for future use.
  • Results can be dynamically applied to the dialup tunnel for egress traffic shaping.
  • Results can be used as a reference to manually configure an interface’s inbandwidth and outbandwidth.

License not required.

Speed test from spokes to hub

  • Server is the hub.
  • Tests initiated from spokes, even when a spoke is behind a NAT device.
  • Results are cached on the spoke for future use and sent to the hub.
  • Results can be dynamically applied to the dialup tunnel for egress traffic shaping.
  • Results can be used as a reference to manually configure an interface’s inbandwidth and outbandwidth.

License not required.

The SD-WAN Network Monitor service is a tool designed to determine upload and download speeds. Speed tests can be conducted either on-demand or according to a predetermined schedule, measuring upload and download speeds of up to 1 Gbps. The results of the tests can be used as reference for various applications, including the following:

  • Configuring the estimated bandwidth of an interface, which can be employed in conjunction with various WAN intelligence strategies. See Using speed test results with SD-WAN for more information.

  • Configuring the inbandwidth and outbandwidth of an interface for use in traffic shaping. See Using speed test results with traffic shaping for more information.

  • Applying the speed test to dialup VPN tunnels in a hub and spoke deployment to conduct traffic shaping.

FortiOS offers a variety of methods for testing SD-WAN speed. The following table provides a brief overview of each method and guidance on when it might be most advantageous to use one method over the others.

Service

Overview

License

CLI speed test

  • Provides the most flexibility and options, which enables the speed test to operate with user-defined parameters.
  • Results can be used as reference to manually add to the interface's estimated bandwidth, or inbandwidth and outbandwidth.
  • Server is on the cloud, which is maintained by Fortinet.

Requires a valid SD-WAN Network Monitor license.

GUI speed test

  • Downloads the speed test server list automatically.
  • Results can be added to the interface's estimated bandwidth with one click.
  • Results are automatically updated in the interface measured-upstream-bandwidth and measured-downstream-bandwidth fields.
  • Results can be used as a reference to manually configure an interface’s inbandwidth and outbandwidth.
  • Easier to use.
  • Server is on the cloud, which is maintained by Fortinet.

Requires a valid SD-WAN Network Monitor license.

Scheduled interface speed test

  • Speed tests can be scheduled to run automatically.
  • Results are automatically updated in the interface measured-upstream-bandwidth and measured-downstream-bandwidth fields.
  • Results can be used as a reference to manually configure an interface’s inbandwidth and outbandwidth.
  • Possible to temporarily bypass the bandwidth limits set on the interface and configure custom maximum bandwidth limits.
  • Server is on the cloud, which is maintained by Fortinet.

Requires a valid SD-WAN Network Monitor license.

Speed test from hub to spoke

  • Server is the spoke.
  • Tests initiated from the hub.
  • Results are cached for future use.
  • Results can be dynamically applied to the dialup tunnel for egress traffic shaping.
  • Results can be used as a reference to manually configure an interface’s inbandwidth and outbandwidth.

License not required.

Speed test from spokes to hub

  • Server is the hub.
  • Tests initiated from spokes, even when a spoke is behind a NAT device.
  • Results are cached on the spoke for future use and sent to the hub.
  • Results can be dynamically applied to the dialup tunnel for egress traffic shaping.
  • Results can be used as a reference to manually configure an interface’s inbandwidth and outbandwidth.

License not required.