Skip to main content
hanifannuman
hanifannuman
New Member
June 24, 2022
Question

Fortigate 60D ISP speed limit

  • June 24, 2022
  • 6 replies
  • 12966 views

i just want to check i have upgrade the ISP line 800 download 200 upload
when i do speed test internal network i get 110 download 110 upload
but when direct ISP router i get 700++ download 150++ upload
this is becuase the fortgate 60D box limit or setting?

6 replies

A
Anonymous_User
Contributor
June 24, 2022

Hello, 

Thank you for using Fortinet Community. This could happen if a limit is configured on the interface. Please refer this article: Technical Tip: Interface bandwidth limit. 

Please let me know if this helps.

hanifannuman
hanifannumanAuthor
New Member
June 27, 2022

Hi Irfan,

 

if the  traffic shaping setting already enable "Max Bandwidth" should be it will auto right?

 

Thank You,

hanif 

    A
    Anonymous_User
    Contributor
    June 27, 2022

    Hello,
    By default, if traffic shaping is enabled, the bandwidth will be distributed evenly to all policies using it. You can enable per policy shaping to apply shaping individually to each policy.

    Please refer to this document (change the version if needed) for more information: Limiting bandwidth with traffic shaping

      sjoshi
      Staff
      sjoshi
      Staff
      June 24, 2022

      Dear hanifannuman,

       

      Thank you for posting to the Fortinet Community Forum.

       

      As per your description you are facing speed issue in 60D.

       

      Please answer some of my query:-
      > Are you using any traffic shaping?
      > Have you tested creating a test policy for one of the user without any UTM profile?
      > Please check by changing the DNS to 8.8.8.8.

       

      Please perform the ipref test and share me the output.
      Please find the link for your reference
      https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-perform-bandwidth-tests/ta-p/197784

       

      Please share the following output:-
      diagnose hardware deviceinfo nic <interface_name>
      nsysctl ifconfig <interface_name>
      get sys performance status

       

      Let us know if this helps.

       

      Thanks

      Thanks, Salon
      hanifannuman
      hanifannumanAuthor
      New Member
      June 27, 2022

      Hi Salon Raj Joshi,

       

      Below is my reply

       

      > Are you using any traffic shaping?

      Yes
      > Have you tested creating a test policy for one of the user without any UTM profile?

      already test but the problem still same
      > Please check by changing the DNS to 8.8.8.8.

      already try but the problem still same

       

      to do perform the ipref test i not much understand the step with one i really need to do

      u have any easy way to check?

       

      Thank You,

      Hanif

       

      yfxwj
      yfxwj
      Visitor III
      June 27, 2022

      Hello,

           Did you use the FGT 60D  with  ISP  PPPOE model?

      Then speed test internal network.   I think FGT60D  no support  PPPOE not good.

      hanifannuman
      hanifannumanAuthor
      New Member
      June 27, 2022

      Hi, 

       

      Yes, i use FTG 60D with ISP PPPOE

      aahmadzada
      Staff
      aahmadzada
      Staff
      June 27, 2022

      PPPoE is handled by PPP software process and connections are terminated in virtual interfaces. Therefore PPPoE connection cannot be offloaded to the hardware and can`t be accelerated.


      Ask your ISP to switch from PPPoE to DHCP or static IP address assignment and you should see a slight improvement in the throughput.

      Ahmad

        EEHC
        EEHC
        Explorer III
        June 27, 2022

        I believe the role of the interface should be set to WAN and the bandwidth has to be configured on the interface. The devices detect the speed from the speed of the physical interface. It could not know the speed of the link connected to the router. This causes a problem with WAN optimization devices.

         

        Mohamed Gaber

        hanifannuman
        hanifannumanAuthor
        New Member
        June 28, 2022

        Dear Mohamed Gaber,

         

        mean need to config wan interface bandwidth?

         

         

         

         

        Thank You,

        Hanif

        EEHC
        EEHC
        Explorer III
        June 28, 2022

        config system interface
        edit "port1"
        .....
        set role wan
        set inbandwidth 200
        set outbandwidth 400
        .....
        next
        end

        EEHC
        EEHC
        Explorer III
        June 28, 2022

        Useful links

        https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-check-estimated-bandwidth/ta-p/189665?externalID=FD50115

         

        https://community.fortinet.com/t5/FortiGate/Technical-Tip-Command-to-get-the-bandwidth-usage-session/ta-p/198292

        hanifannuman
        hanifannumanAuthor
        New Member
        June 28, 2022

        Dear EEHC,

         

        tq for advise, when i read  to run this option i need have SD-WAN interface right?

        for my FTG 60D dont have this option.

         

        Thank You,

        Hanif

         

        EEHC
        EEHC
        Explorer III
        June 28, 2022

        No, it is available for all ethernet ports. The displayed settings change according to the role you set for the interface.

         

        Mohamed Gaber

        Eder
        Eder
        New Member
        July 29, 2022

        > 110 download 110 upload

        Sounds strangely like a 100Mbit connection instead of Gigabit - please check the connection speed between WAN port and ISP modem - does it show Gigabit connection?

         

        A bad cable or a bad port on the ISP modem may cause speed to fall back to 100Mbit and this might explain the strange limitation.

        Terms & ConditionsAccessibility statement