FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Not applicable
Article Id 189833
Description
This article describes how to gather hardware information about an ASM module in a FortiGate platform.
ASM view from the WEB Based manager :

sotoole_FD31089_3810 ASM.JPG

Solution

Gathering ASM module “Board” information.

The board serial number for a ASM module will be the same no matter which interface on the card is diagnosed.

Gathering the board information, which contains hardware revision and serial number:

1. Using a get system interface command get a list of each interface by name
2. Run hardware device info NIC diagnostics to get the information of an ASM module


Example on a FortiGate 3810 :

1. List of all interfaces


FG3K8A3407600247 # get sys interface

== [ port1 ]

name: port1 mode: static ip: 172.31.208.47 255.255.255.0 status: up netbios-forward: disable type: physical mtu-override: disable wccp: disable explicit-web-proxy: disable

[.....]
[.....]

== [ amc-sw2/1 ]

name: amc-sw2/1 mode: static ip: 0.0.0.0 0.0.0.0 status: up netbios-forward: disable type: physical mtu-override: disable wccp: disable explicit-web-proxy: disable

== [ amc-sw2/2 ]

name: amc-sw2/2 mode: static ip: 0.0.0.0 0.0.0.0 status: up netbios-forward: disable type: physical mtu-override: disable wccp: disable explicit-web-proxy: disable

[....]
Notice that the ASM module interface names appear at the bottom of the interface list.



2. Use the above interface name for the following diagnose command :
 

FG3K8A3407600247 # diag hardware deviceinfo nic amc-sw2/4

Driver Name: NP2
Version: 0.92
Chip Revision: 2
BoardSN: ASMFB43409100044 ( <-- board serial number of ASM module)
Module Name: FB4-256
DDR Size: 256 MB
Bootstrap ID: 3
PCIX-64bit-@133MHz bus: 0e:0e.0
PCI Express: x4
Admin: up
MAC: 00:09:0f:67:a7:1b
Permanent_HWaddr: 00:09:0f:67:a7:1b ( <-- notice unique MAC addresses )
Link: down Speed: 10Mbps Duplex: Half
Rx Pkts: 0
Tx Pkts: 0
Rx Bytes: 0
Tx Bytes: 0
MAC3 Rx Errors: 0
MAC3 Rx Dropped: 0
MAC3 Tx Dropped: 0
MAC3 FIFO Overflow: 0
MAC3 IP Error: 0
TAE Entry Used: 0
TSE Entry Used: 0
Host Dropped: 0
Shaper Dropped: 0
EEI0 Dropped: 0
EEI1 Dropped: 0
EEI2 Dropped: 0
EEI3 Dropped: 0
IPSEC QFIFO Dropped: 0
IPSEC DFIFO Dropped: 0
PBA: 123/1019/251
Forwarding Entry Used: 0
Offload IPSEC Antireplay ENC Status: Disable
Offload IPSEC Antireplay DEC Status: Enable
Offload Host IPSEC Traffic: Disable

Each time this command is run for an interface on the same ASM module interface it will return the same board serial number :

FG3K8A3407600247 # diag hardware deviceinfo nic amc-sw2/3


Driver Name: NP2
Version: 0.92
Chip Revision: 2
BoardSN: ASMFB43409100044 ( <-- board serial number of ASM module)
Module Name: FB4-256
DDR Size: 256 MB
Bootstrap ID: 3
PCIX-64bit-@133MHz bus: 0e:0e.0
PCI Express: x4
Admin: up
MAC: 00:09:0f:67:a7:1a
Permanent_HWaddr: 00:09:0f:67:a7:1a ( <-- notice unique MAC addresses )
Link: down Speed: 10Mbps Duplex: Half
Rx Pkts: 0
Tx Pkts: 0
Rx Bytes: 0
Tx Bytes: 0
MAC2 Rx Errors: 0
MAC2 Rx Dropped: 0
MAC2 Tx Dropped: 0
MAC2 FIFO Overflow: 0
MAC2 IP Error: 0
TAE Entry Used: 0
TSE Entry Used: 0
Host Dropped: 0
Shaper Dropped: 0
EEI0 Dropped: 0
EEI1 Dropped: 0
EEI2 Dropped: 0
EEI3 Dropped: 0
IPSEC QFIFO Dropped: 0
IPSEC DFIFO Dropped: 0
PBA: 123/1019/251
Forwarding Entry Used: 0
Offload IPSEC Antireplay ENC Status: Disable
Offload IPSEC Antireplay DEC Status: Enable
Offload Host IPSEC Traffic: Disable