Technical Tip: How to check the packet counter on the ISF (Integrated Switch Fabric) in a Marvell chip on FortiGate
| Description | This article describes how to check the packet counter on the ISF (Integrated Switch Fabric) in a Marvell chip in FortiGate. |
| Scope | FortiGate 400F/401F, 600F/601F, 200F/201F, v7.0.x, v7.2.x, v7.4.x, v7.6.x. |
| Solution | The packet counter of the ISF (Integrated Switch Fabric), which refers to the Marvell chip, can be checked using the following method.
Check which Marvell Switch port the front panel port for counter verification is mapped to. In the following example, port1 is mapped to 0/25.
diagnose npu np7 port-list
FortiGate 200F/201F Port Mapping: Physical Port SW_port_id "port1"        "0/25"
Connect to the Marvell CLI using the following command to retrieve the counters.
diagnose sys mvl cli
Execute the following command to display the counters.
do show interfaces mac counters ethernet <port number>
debug
exit <----- After retrieving the information, always exit using ‘exit’.
To check ISF allocate information, run the following commands:
show tail-drop device 0 show tail-drop-allocated buffers all
To see a traffic trace, run the following command:
show counters packet-trace device 0
   To check traffic trace from a specific interface, run the following commands. The example below is port1. The SW_port_id of port1 is 29.
configure
show counters packet-trace device 0  
After collecting all logs, disconnect from the Marvell CLI with the following command.
CLIexit
Related documents: |
