Description
The article describes IPv4 interface-based traffic shaping.
Solution
NP6, NP6Xlite, and NP6lite offloading of IPv4 interface-based in bandwidth and out bandwidth traffic shaping is supported by some FortiGate models.
This feature is supported for physical and LAG interfaces and not for VLAN interfaces.
If the FortiGate supports interface-based traffic shaping, use the following command to enable this feature:
# config system npu
set intf-shaping-offload enable
end
If the FortiGate does not have this command, it does not support NP6, NP6Xlite and NP6lite offloading of sessions with interface-based traffic shaping.
For FortiGates with NP6, NP6Xlite, or NP6lite processors that do not support offloading of sessions with interface-based traffic shaping, configuring in bandwidth traffic shaping has no effect.
Configuring out bandwidth traffic shaping imposes more bandwidth limiting than configured, potentially reducing throughput more than expected.
Once support enabled for NP6, NP6Xlite, or NP6lite offloading of interface-based traffic shaping, use commands similar to the following to configure interface-based traffic shaping:
# config system interface
edit port1
set outbandwidth <value>
set inbandwidth <value>
set ingress-shaping-profile <profile>
set egress-shaping-profile <profile>
end
Enabling NP6, NP6Xlite, and NP6lite offloading of IPv4 interface-based traffic shaping may reduce NP6, NP6Xlite, or NP6lite offloading performance.
Theperformance reduction will depend on the FortiGate configuration and network conditions.
Related Articles
Technical Tip: Interface-based traffic shaping with NP acceleration
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.