Setting switch-mode mapping on the ADM-XD4
Setting switch-mode mapping on the ADM-XD4 The ADM-XD4 SP has four 10Gb/s ports, but the NP4 processor it contains has only two 10Gb/s ports. The external ports you use are important to optimize the SP...
View ArticleHardware acceleration get and diagnose commands
Hardware acceleration get and diagnose commands This section describes some get and diagnose commands you can use to display useful information about the NP6 processors sessions processed by NP6...
View ArticleUsing diagnose npu np6 npu-feature to verify enabled NP6 features
Using diagnose npu np6 npu-feature to verify enabled NP6 features You can use the diagnose npu np6 npu-feature command to see what NP6 features are enabled and which are not. The following command...
View ArticleUsing the diagnose sys session/session6 list command
Using the diagnose sys session/session6 list command The diagnose sys session list and diagnose sys session6 list commands list all of the current IPv4 or IPv6 sessions being processed by the...
View Articlediagnose npu np6 session-stats (number of NP6 IPv4 and IPv6 sessions)
diagnose npu np6 session-stats <np6-id> (number of NP6 IPv4 and IPv6 sessions) You can use the diagnose npu np6 portlist command to list the NP6-ids and the interfaces that each NP6 is connected...
View Articlediagnose npu np6 ipsec-stats (NP6 IPsec statistics)
diagnose npu np6 ipsec-stats (NP6 IPsec statistics) The command output includes IPv4, IPv6, and NAT46 IPsec information: spi_ses4 is the IPv4 counter spi_ses6 is the IPv6 counter 4to6_ses is the NAT46...
View Articlediagnose sys mcast-session/session6 list (IPv4 and IPv6 multicast sessions)
diagnose sys mcast-session/session6 list (IPv4 and IPv6 multicast sessions) This command lists all IPv4 or IPv6 multicast sessions. If a multicast session can be offloaded, the output includes the...
View Articlediagnose npu np6 sse-stats (number of NP6 sessions and dropped sessions)
diagnose npu np6 sse-stats <np6-id> (number of NP6 sessions and dropped sessions) This command displays the total number of inserted, deleted and purged sessions processed by a selected NP6...
View Articlediagnose npu np6 dce (number of dropped NP6 packets)
diagnose npu np6 dce <np6-id> (number of dropped NP6 packets) This command displays the number of dropped packets for the selected NP6 processor. IHP1_PKTCHK number of dropped IP packets...
View ArticleHow to Manage FortiSwitch from FortiGate
Managing your FortiSwitch from your FortiGate is an awesome feature set that Fortinet implemented in their hardware. 5.4.1 makes it so much easier to accomplish this. Nothing sucks worse than running...
View Articlediagnose hardware deviceinfo nic (number of packets dropped by an interface)
diagnose hardware deviceinfo nic <interfac-name> (number of packets dropped by an interface) This command displays a wide variety of statistics for FortiGate interfaces. The fields Host Rx...
View Articledianose npu np6 synproxy-stats (NP6 SYN-proxied sessions and unacknowledged...
dianose npu np6 synproxy-stats (NP6 SYN-proxied sessions and unacknowledged SYNs) This command display information about NP6 syn-proxy sessions including the total number proxied sessions. As well the...
View ArticleChapter 13 – High Availability
Chapter 13 – High Availability This FortiOS Handbook chapter contains the following sections: Solving the High Availability problem describes the high availability problem and introduces the FortiOS...
View ArticleFortiOS 5.4 HA new features
FortiOS 5.4 HA new features FGCP supports BFD enabled BGP graceful restart after an HA failover (255574) If an HA cluster is part of a Border Gateway Protocol (BGP) bidirectional forwarding detection...
View ArticleSolving the High Availability problem
Solving the High Availability problem The basic high availability (HA) problem for TCP/IP networks and security gateways is keeping network traffic flowing. Uninterrupted traffic flow is a critical...
View ArticleAn introduction to the FGCP
An introduction to the FGCP A FortiGate HA cluster consists of two to four FortiGate units configured for HA operation. Each FortiGate unit in a cluster is called a cluster unit. All cluster units must...
View ArticleFortiGate HA compatibility with DHCP and PPPoE
FortiGate HA compatibility with DHCP and PPPoE FortiGate HA is compatible with DHCP and PPPoE but care should be taken when configuring a cluster that includes a FortiGate interface configured to get...
View ArticleHA and distributed clustering
HA and distributed clustering The FGCP supports widely separated cluster units installed in different physical locations. Distributed clusters can have cluster units in different rooms in the same...
View ArticleClusters of three or four FortiGate units
Clusters of three or four FortiGate units The FGCP supports a cluster of two, three, or four FortiGate units. You can add more than two units to a cluster to improve reliability: if two cluster units...
View ArticleDisk storage configuration and HA
Disk storage configuration and HA If your cluster units include storage disks (for example for storing log messages, WAN optimization data and web caching) all cluster units must have identical storage...
View Article