FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
krajaa
Staff
Staff
Article Id 196511

Description
The article describes IPv4 interface-based traffic shaping.

Solution
NP6, NP6Xlite, and NP6lite offloading of IPv4 interface-based in bandwidth and out bandwidth traffic shaping is supported by some FortiGate models.

This feature is supported for physical and LAG interfaces and not for VLAN interfaces.
If the FortiGate supports interface-based traffic shaping, use the following command to enable this feature:

# config system npu
    set intf-shaping-offload enable
end

If the FortiGate does not have this command, it does not support NP6, NP6Xlite and NP6lite offloading of sessions with interface-based traffic shaping.
For FortiGates with NP6, NP6Xlite, or NP6lite processors that do not support offloading of sessions with interface-based traffic shaping, configuring in bandwidth traffic shaping has no effect.
Configuring out
bandwidth traffic shaping imposes more bandwidth limiting than configured, potentially reducing throughput more than expected.

Once support enabled for NP6, NP6Xlite, or NP6lite offloading of interface-based traffic shaping, use commands similar to the following to configure interface-based traffic shaping:

# config system interface
    edit port1
        set outbandwidth <value>
        set inbandwidth <value>
        set ingress-shaping-profile <profile>
        set egress-shaping-profile <profile>
    end

Enabling NP6, NP6Xlite, and NP6lite offloading of IPv4 interface-based traffic shaping may reduce NP6, NP6Xlite, or NP6lite offloading performance.
The
performance reduction will depend on the FortiGate configuration and network conditions.

Related Articles

Technical Tip: Interface-based traffic shaping with NP acceleration

Contributors