Skip to main content
ESCHAN_FTNT
Staff
ESCHAN_FTNT
Staff
October 20, 2020

Technical Tip: How to perform HQIP test on FortiGate-6000F (630xF/ 650xF) series

  • October 20, 2020
  • 0 replies
  • 7784 views

Description

 

This article describes how to perform the HQIP test on the FortiGate-6000F chassis.

 

Scope

 

FortiGate.

 

Solution


Overview:

The Hardware Quick Inspection Package (HQIP) is a built-in diagnostic tool in FortiOS that validates hardware health.

Fortigate chassis platforms like FortiGate 630xF/650xF, HQIP must be executed separately on:

  • MBD (Management Board).
  • FPCs (FortiProcessing Cards/data plane blades).

This is because the system uses a distributed architecture in which the control and data planes operate independently.

 

Important considerations:

Before running HQIP:

  • Traffic & Downtime Impact.
    Some tests (especially interface tests) may disrupt traffic, so plan execution during a maintenance window.
  • Backup & Physical Access Preparation.
    Always take a full configuration backup before starting the test. Plan to be local to the firewall to perform this test—console access is recommended, and some tests require loopback cables and re-cabling of the device.
  • HA Best Practice.
    In HA setups, run HQIP on the secondary unit first and perform failover if required.

 

Running the test suite:

FortiGate-6301F consists of 6 Fortinet Processor Cards (FPC) and FGT-6501F with 10 FPCs. Both variants will have a Management Board (MBD) that resides on Slot #0.

When logging into FortiGate-6000F from the CLI (SSH/Telnet), it enters by default the MBD of the FortiGate-6000F chassis.

Step 1: Check Available Tests on MBD

 

diagnose hardware test info

 

Sample output for FortiGate-6501F is below:

 
The number of CPUs and memory indicates that only the HQIP test on a single blade is performed (MBD).

Step 2: Run HQIP on MBD.

diagnose hardware test suite all

Below is the sample HQIP test report for MBD of FortiGate-6501F:

pbhasuran_0-1774254102142.png

 

Based on the above output, the HQIP test is done on the MBD, as it is missing tests such as NPU and ASIC.

Step 3: Switch to FPC.
To perform the HQIP test on the FPC, use the following command:
 
execute load-balance slot manage <chassis id.slot/slot>
 
For example, for chassis 1 slot 5, use the command 'execute load-balance slot manage 1.5'.

Step 4: Check available tests on FPC.

diagnose hardware test info

Sample output for FortiGate-6501F is below:
 
 
The NPU and ASIC tests are available on the FPC, but the LED/USB/button were not present on the FPC because the FPC does not have any physical interface or LED.
 
Step 5: Run HQIP on FPC.
 
diagnose hardware test suite all
 
Below is the sample HQIP test report for FPC of FortiGate-6501F:
 
  
Step 6: Repeat for All FPC Slots. Run HQIP on each available slot.

Do note that the throughput test that is normally available on a normal appliance-based FortiGate is missing, based on the HQIP test report shown above.
 
This is expected because FortiGate-6000F chassis have a very complex network architecture, and if a throughput test is required, use an external tester to conduct the throughput test instead.

 

Related article:

Technical Tip: RMA - HQIP test (with built-in FortiOS diagnostic commands)

    Terms & ConditionsAccessibility statement