Traffic Shaper from external not work
Hello Community,
Fortigate:
1500D v5.6.12
200F v6.4.8
On both Fortigate firewalls there is an access with OpenVPN.
On the OpenVPN server the public ip addresses are bound, which I address as OpenVPN user. The firewall forwards the requests to the OpenVPN (port 443) server by policy. This also works without problems.
Now I want to activate traffic shaping for this connection.
200MBit should be guaranteed. A maximum bandwidth limit is not necessary. The configuration is the same on both Fortigates.
The problem is, I don't see any traffic in the Traffic Shaper overview. Also with the following cli command I don't see any traffic:
diagnose firewall shaper traffic-shaper list
current-bandwidth always stays at 0b/sec
Where did I make the configuration error here?
x1 = external interface (10Gbit)
x2 = internal interface (10Gbit)
Public IP example:
123.123.123.123 (bound on the OpenVPN server behind the firewall)
(The other firewall use a another public ip which is bound also on the OpenVPN server)
config firewall policy
edit 96
set name "OpenVPN access"
set uuid xxxxxxxxxxx
set srcintf "x1"
set dstintf "x2"
set srcaddr "all"
set dstaddr "123.123.123.123"
set action accept
set schedule "always"
set service "HTTPS"
set logtraffic all
next
config firewall shaper traffic-shaper
edit "OpenVPN-guarantee"
set guaranteed-bandwidth 200000
next
config firewall shaping-policy
edit 1
set name "OpenVPN admin-traffic"
set service "HTTPS"
set dstintf "x2"
set traffic-shaper "OpenVPN-guarantee"
set traffic-shaper-reverse "OpenVPN-guarantee"
set srcaddr "all"
set dstaddr "123.123.123.123"
next
Regards
Holger
