Technical Tip: Enabling traffic shaping on a hyperscale firewall under 'config system npu'
| Description | This article describes how traffic shaping can be enabled on a hyperscale firewall. |
| Scope | Hyperscale firewall and below v7.0.11. |
| Solution | In a hyperscale firewall when hyperscale licenses are enabled it is not possible to select shaping for 'set default-qos-type' under 'config system npu'.
FortiGate-1801F # config sys npu FortiGate-1801F (npu) # set default-qos-type policing To change the configuration to shaping, it is required to disable hyperscale license as below:
exec hscalefw-license XXXXXXXXXXXXXXXXXX Once done, it is required to change the below setting too: Config system npu set policy-offload-level disable Both options are available for selection. FortiGate-1801F (npu) # set default-qos-type ? policing QoS type policing. shaping QoS type shaping. Note: Starting from v7.2.11, v7.4.8 GA , v7.6.1 3 GA; the option 'default-qos-type' under 'config system npu' no longer supports shaping, and the only selection for this option is policing. For further information on the behavior change, refer to the following: |