Technical Tip: How to check DP with FPC in FortiGate-6k

[Anthony_E]

Description
This article describes how to check which FPC the DP would load-balance a session to for processing.

Scope

For FortiGate-6000.

Solution
To check status of FPC, health check and number of FPC available:

F6KF31T018-----5 (global) # diagnose load-balance status
==========================================================================
MBD SN: F6KF31T018-----5
  Master FPC Blade: slot-1
 
     Slot  1: FPC6KFT018-----8
       Status:Working   Function:Active
       Link:      Base: Up          Fabric: Up  
       Heartbeat: Management: Good   Data: Good  
       Status Message:"Running"
     Slot  2: FPC6KFT018-----6
       Status:Working   Function:Active
       Link:      Base: Up          Fabric: Up  
       Heartbeat: Management: Good   Data: Good  
       Status Message:"Running"
     Slot  3: FPC6KFT018-----8
       Status:Working   Function:Active
       Link:      Base: Up          Fabric: Up  
       Heartbeat: Management: Good   Data: Good  
       Status Message:"Running"
     Slot  4: FPC6KFT018-----6
       Status:Working   Function:Active
       Link:      Base: Up          Fabric: Up  
       Heartbeat: Management: Good   Data: Good  
       Status Message:"Running"
     Slot  5: FPC6KFT018-----5
       Status:Working   Function:Active
       Link:      Base: Up          Fabric: Up  
       Heartbeat: Management: Good   Data: Good  
       Status Message:"Running"
     Slot  6: FPC6KFT018-----7
       Status:Working   Function:Active
       Link:      Base: Up          Fabric: Up  
       Heartbeat: Management: Good   Data: Good  
       Status Message:"Running"

Find which FPC a session is or will be loaded balance to:

# diagnose load-balance dp find session normal <IP protocol> <srcip> <srcport> <dstip> <dstport>

F6KF31T018-----5 (global) # diagnose load-balance dp find session  normal 17 10.101.11.7 19696 10.10.11.255 8014
==========================================================================
MBD SN: F6KF31T018-----5
Primary Bin 87660
New session to slot 2 (src-dst-ip-sport-dport)

In the example, the session would be sent to FPC2 (slot 2) for processing.

Slot:2  Module SN: FPC6KFT018-----6

session info: slot=2 ori_slot=2 proto=17 proto_state=00 duration=48360 expire=121 timeout=0 flags=00000000 sockflag=00000000 sockport=0 av_idx=0 use=4
origin-shaper=
reply-shaper=
per_ip_shaper=
class_id=0 ha_id=0 policy_dir=0 tunnel=/ vlan_cos=0/0
state=local may_dirty nosyn_ses
statistic(bytes/packets/allow_err): org=74060/805/1 reply=0/0/0 tuples=2
tx speed(Bps/kbps): 1/0 rx speed(Bps/kbps): 0/0
orgin->sink: org pre->in, reply out->post dev=68->0/0->68 gwy=0.0.0.0/0.0.0.0
hook=pre dir=org act=noop 10.101.11.7:19696->10.101.11.255:8014(0.0.0.0:0)
hook=post dir=reply act=noop 10.101.11.255:8014->10.101.11.7:19696(0.0.0.0:0)
misc=0 policy_id=4294967295 auth_info=0 chk_client_info=0 vd=1
serial=00000083 tos=ff/ff app_list=0 app=0 url_cat=0
rpdb_link_id = 00000000 ngfwid=n/a
dd_type=0 dd_mode=0
npu_state=00000000
no_ofld_reason:  local
total session 1