Technical Tip: How to check DP with FPC in FortiGate-6k
Description
This article describes how to check which FPC the DP would load-balance a session to for processing.
Scope
Solution
To check status of FPC, health check and number of FPC available:
This article describes how to check which FPC the DP would load-balance a session to for processing.
Scope
For FortiGate-6000.
Solution
To check status of FPC, health check and number of FPC available:
F6KF31T018-----5 (global) # diagnose load-balance statusFind which FPC a session is or will be loaded balance to:
==========================================================================
MBD SN: F6KF31T018-----5
Master FPC Blade: slot-1
Slot 1: FPC6KFT018-----8
Status:Working Function:Active
Link: Base: Up Fabric: Up
Heartbeat: Management: Good Data: Good
Status Message:"Running"
Slot 2: FPC6KFT018-----6
Status:Working Function:Active
Link: Base: Up Fabric: Up
Heartbeat: Management: Good Data: Good
Status Message:"Running"
Slot 3: FPC6KFT018-----8
Status:Working Function:Active
Link: Base: Up Fabric: Up
Heartbeat: Management: Good Data: Good
Status Message:"Running"
Slot 4: FPC6KFT018-----6
Status:Working Function:Active
Link: Base: Up Fabric: Up
Heartbeat: Management: Good Data: Good
Status Message:"Running"
Slot 5: FPC6KFT018-----5
Status:Working Function:Active
Link: Base: Up Fabric: Up
Heartbeat: Management: Good Data: Good
Status Message:"Running"
Slot 6: FPC6KFT018-----7
Status:Working Function:Active
Link: Base: Up Fabric: Up
Heartbeat: Management: Good Data: Good
Status Message:"Running"
# diagnose load-balance dp find session normal <IP protocol> <srcip> <srcport> <dstip> <dstport>In the example, the session would be sent to FPC2 (slot 2) for processing.
F6KF31T018-----5 (global) # diagnose load-balance dp find session normal 17 10.101.11.7 19696 10.10.11.255 8014
==========================================================================
MBD SN: F6KF31T018-----5
Primary Bin 87660
New session to slot 2 (src-dst-ip-sport-dport)
Slot:2 Module SN: FPC6KFT018-----6
session info: slot=2 ori_slot=2 proto=17 proto_state=00 duration=48360 expire=121 timeout=0 flags=00000000 sockflag=00000000 sockport=0 av_idx=0 use=4
origin-shaper=
reply-shaper=
per_ip_shaper=
class_id=0 ha_id=0 policy_dir=0 tunnel=/ vlan_cos=0/0
state=local may_dirty nosyn_ses
statistic(bytes/packets/allow_err): org=74060/805/1 reply=0/0/0 tuples=2
tx speed(Bps/kbps): 1/0 rx speed(Bps/kbps): 0/0
orgin->sink: org pre->in, reply out->post dev=68->0/0->68 gwy=0.0.0.0/0.0.0.0
hook=pre dir=org act=noop 10.101.11.7:19696->10.101.11.255:8014(0.0.0.0:0)
hook=post dir=reply act=noop 10.101.11.255:8014->10.101.11.7:19696(0.0.0.0:0)
misc=0 policy_id=4294967295 auth_info=0 chk_client_info=0 vd=1
serial=00000083 tos=ff/ff app_list=0 app=0 url_cat=0
rpdb_link_id = 00000000 ngfwid=n/a
dd_type=0 dd_mode=0
npu_state=00000000
no_ofld_reason: local
total session 1
