New Member

Question

FG 50E v6.2.12 Download Speed much lower than upload

Forum|Forum|2 years ago
August 30, 2023
8 replies
7416 views

Hi All,

I have a strange problem with our Fortigate 50E. The router works with a fiber connection, wan interface configured as a VLAN, PPPoE.

Router worked properly about 4 years, including one year with fiber. The max speed was 300Mbps / 70 Mbps (DL/UL)

Two months ago I noticed that DL speed decreased to 30Mbps, now its only about 4Mbps

I've checked cables, I also connected router of ISP (when ISP's router was connected the speed returned to 300/70)

Is there something that shoud I check with my FG50?

regards,

FortiGate

DejanMaric

New Member

Hi!

Try an iperf speedtest over the CLI:

diag traffictest server-intf wan1
diag traffictest client-intf wan1
diag traffictest port 9211
diag traffictest run -R -c 178.215.228.109

Maybe you need to change the interface to wan2 or any other interface you use as your wan interface. You can also use any other public iperf server and his port.

BR

rafal0001Author

New Member

I got such a response:

PL-ROF-FG50E # diagnose traffictest server-intf wanx server-intf:	wan2 PL-ROF-FG50E # diag traffictest client-intf wanx client-intf:	wan2 PL-ROF-FG50E # diag traffictest port 9211 port:	9211 PL-ROF-FG50E # diagnose traffictest run -R -c 178.215.228.109  Can not find ip (wan2) Command fail. Return code -1

DejanMaric

New Member

You wrote "diag traffictest server-intf wanx"so the FGT took wan2 try it with wan1 please.

pjawalekar

Staff

Hi rafal0001,

Please validate if you using any traffic shaper which can limit the speed for the users. Also you can validate what is the overall bandwidth utilization on wan/isp link when you are facing the issue, as when you connect direct pc to ISP router only single user traffic will be there. And when connected behind fortigate multiple users can utilize the link.
Also you can validate the speed and duplex settings on the wan interface which is connected to the isp router. Also check if there are any drops/error at the interface level.
fnsysctl ifconfig interface-name -----> to check if there are any drops on FIrtigate interface
get hardware nic port1 -----> To check duplex settings

You can refer to below KB regarding Low-throughput-troubleshooting
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Low-throughput-troubleshooting/ta-p/217967

Regard's,

Pratik

rafal0001Author

New Member

Please validate if you using any traffic shaper which can limit the speed for the users.

How to do it?

Also you can validate what is the overall bandwidth utilization on wan/isp link when you are facing the issue, as when you connect direct pc to ISP router only single user traffic will be there. And when connected behind fortigate multiple users can utilize the link.
Also you can validate the speed and duplex settings on the wan interface which is connected to the isp router.

I connected only one PC to the LAN side, the effect is the same: 4M (DL) 60M (UL)

Also check if there are any drops/error at the interface level.

PL-ROF-FG50E # fnsysctl ifconfig wan2 wan2	Link encap:Ethernet  HWaddr 90:6C:AC:ED:FA:88 	UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1 	RX packets:304659612 errors:0 dropped:0 overruns:0 frame:0 	TX packets:157165022 errors:0 dropped:0 overruns:0 carrier:0 	collisions:0 txqueuelen:532  	RX bytes:370622720258 (345.2 GB)  TX bytes:42500476344 (39.6 GB) 	Interrupt:195

PL-ROF-FG50E # get hardware nic wan2 Description		Marvell NETA Gigabit Ethernet driver 00000010        System_Device_Name	wan2              Current_HWaddr		90:6c:ac:ed:fa:88                                     Permanent_HWaddr	90:6c:ac:ed:fa:88                                    State			up                                                            Link			up                                                             Speed			1000                                                          Duplex			full                                                         Rx_Packets		304726238                                                 Tx_Packets		157226047                                                 Rx_Bytes		1326958656                                                  Tx_Bytes		3884233739

rafal0001Author

New Member

I believe my device is broken.

Disconnected from main location, I reset it to factory settings and made a nat between two private subnets. Then I tried to download a large file from subnet behind nat (both sides 1Gbps)

The transfer was 700kB/s max and fluctuated to zero.

What do you think?

Regards

Rafal

mle2802

Staff

Hi Rafal,

Could you please verify the part number of this unit by the following command "get sys status".

Regards.

SupportSTR

New Member

You can repair it, just heat the CPU with a hot air gun which will resolder the solders under the CPU. The problem comes from the ball solders under the CPU which degrade over time, you just have to melt them for a few seconds for the FG50E LAN ports to work again :

FG50E CPU

See more here : https://community.fortinet.com/t5/Support-Forum/Fortigate-50E-Dying-Packet-loss-and-lan-ports-stop-forwarding/td-p/202451/page/3

Sign up

Login with SSO

Login to the community

Login with SSO