fortigate 60E Not able to reach 1Gbs

Question

Hi guys,

I just try to troubleshoot internal bandwith issue.

So here my setup.

WAN2 = internet speed test can cap my 150Mbs internet service

WAN1= Forti AP

DMZ = Unraid NAS

Internal hardware= different PC and Raspberry PI

All port are 1000Mbs full duplex

When I copy a large file from or to my NAS I can only get 100Mbs

When I do a IPERF3 test from my NAS to my PC same 100Mbs

When I do an IPERF3 from DMZ port (in fortigate CLI) to my PC (internal hardware switch port)I only get 260Mbs

When I do an IPERF3 from DMZ port (in fortigate CLI) to my NAS (DMZ port)I only get 460Mbs

When I do the IPERF test from Fortigate to my PC CPU core peak at core #1 40% core #2 100% core #3 and #4 1%

When I do the test from PC to NAS the fortigate CPU is 1-2 % range on all core.

again all port are 1000Mbs

So my goal is to be able to reach 1Gbs when connected trough my NAS

Any though?

Thanks

leblanda · Accepted Answer

aj. wrote:Is the NAS on the raspberry pi?The raspberry pi is not gigabit.   No the Raspberry PI is only for my sump pump pit monitoring.My nas is UNRAID on a I5- 4670 intel setup. The command that I remove that seem to fix the problem are: config firewall shaper traffic-shaperedit "fortilink"  set guaranteed-bandwidth 100000  next config firewall shaping-policy  edit 1  set service "ALL"  set dstintf "dmz"  set traffic-shaper "fortilink"  set traffic-shaper-reverse "fortilink"  set srcaddr "all"  set dstaddr "all"  next end

leblanda · Answer

I did change many things in my 60E at the begining.

One thing i'm not sure in the config

Is it normal to have a virtual switch with an hardware switch like this?

Thanks

edit "internal" set vdom "root" set ip 192.168.2.1 255.255.255.0 set allowaccess ping https ssh http fgfm capwap set type hard-switch set stp enable set device-identification enable set role lan set snmp-index 6 next end config system physical-switch edit "sw0" set age-val 0 next end config system virtual-switch edit "internal" set physical-switch "sw0" config port edit "internal1" next edit "internal2" next edit "internal3" next edit "internal4" next edit "internal5" next edit "internal6" next edit "internal7" next end next end

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded