Troubleshooting Tip: High user application traffic interrupts OSPF routing process

Users are constantly sending virtual machine backups in ISP networks.

This traffic consumes almost all of the bandwidth available. When the backups are being sent, FortiGate stops correctly sending all of the OSPF networks.

Workaround:

OSPF traffic works over the port 89 in IP. In FortiGate there is already an object define for this service:

config firewall service custom
    edit "OSPF" 
        set category "Network Services"
        set protocol IP
        set protocol-number 89

end

Configure a traffic shaper to prioritize OSPF traffic:

config firewall shaper traffic-shaper
    edit "OSPF_Priority"
        set guaranteed-bandwidth x <----- Replace x with the bandwidth in Kbps.
        set maximum-bandwidth x <----- Replace x with the bandwidth in Kbps.
        set per-policy enable
next

Configure a traffic shaper policy using the OSPF traffic shaper to prioritize an OSPF service:

config firewall shaping-policy
    edit 1
        set uuid 4325d168-a6e2-51f0-ad1c-1c044dfdcb18
        set name "OSPF_Priority"
        set service "OSPF"
        set srcintf "port2"
        set dstintf "port1"
        set traffic-shaper "OSPF_Traffic"
        set traffic-shaper-reverse "OSPF_Traffic"
        set srcaddr "all"
        set dstaddr "all"
    next