Skip to main content
Sadhi_Jayz
Sadhi_Jayz
Explorer
April 4, 2025
Solved

Traffic Shaping Profiles are Not Working

  • April 4, 2025
  • 6 replies
  • 6558 views

Hi Fortinet Community,

 

We're facing an issue where traffic shaping on our FortiGate device doesn't seem to be working as expected. Despite setting up the necessary configurations, no traffic appears to be shaped — the system always shows current-bandwidth=0(kbps) when monitoring shaping statistics.

 

What We’ve Verified So Far:


1. Class IDs are configured correctly.

2. Traffic Shaping Profile is set up and active.

3. Relevant Traffic Shaping Policy is in place.

4. Interface outbound bandwidth is configured.

5. Traffic Shaping Profile is applied to the correct interface.

6. Ran "diagnose netlink interface list" command

 

No matter what we try, shaping stats show zero usage:

 

2.png

 

Any help or insights would be greatly appreciated.

Thanks in advance!

    Best answer by Sadhi_Jayz

    Hi Fortinet Community,

    Just wanted to provide an update and share the solution that worked for us, in case anyone else encounters a similar issue.

    Thanks to Fortinet TAC support, we were able to resolve the issue. Below is the complete configuration that worked for us to implement traffic shaping using Traffic Shaping Profiles.

     

    1. Create a Traffic Shaping Profile.

     

    2. Define Class IDs with guaranteed/maximum bandwidth percentages within the shaping profile.

     

    3. Create Traffic Shaping Policy and Assign a Class ID.

     

    4. Configure Interface Bandwidth


    On the relevant outgoing interface:

     

    set outbandwidth <value_in_kbps> # Upload bandwidth
    set inbandwidth <value_in_kbps> # Download bandwidth

     

     

    6. Assign the Traffic Shaping Profile to the Outgoing Interface

     

    set egress-shaping-profile <profile_name>
    set ingress-shaping-profile <profile_name>

     

    7. Disable ASIC Offloading in the Relevant Firewall Policy

     

    set auto-asic-offload disable

     

    After applying the above steps, traffic shaping started to work correctly and bandwidth controls were enforced as expected.

     

    Hope this helps anyone facing a similar challenge.

     

    Big thanks to Fortinet TAC and special shout-out to @BillH_FTNT  for doing his best to assist!

     

    Cheers,
    Sadhi.

    6 replies

    GauravPandya
    GauravPandya
    Explorer
    April 4, 2025

    Hi,

    Please run below debug command and check result.

     

    Traffic-shaper-debug.PNG

      Sadhi_Jayz
      Sadhi_JayzAuthor
      Explorer
      April 4, 2025

      Hello,

       

      This command does not work because I have configured traffic shaping profiles (class IDs and traffic shaping policies), but no traffic shapers are configured.

      HarryTran
      Staff
      HarryTran
      Staff
      April 4, 2025

      Hi Sadhi Jayz,
      What is version running on the box?

        Sadhi_Jayz
        Sadhi_JayzAuthor
        Explorer
        April 5, 2025

        Hello Harry,

         

        The device is a FortiGate-601F running firmware version v7.6.2, build 3462 (Feature Release).

        BillH_FTNT
        Staff
        BillH_FTNT
        Staff
        April 4, 2025

        Hi Sadhi,

        Can you share some more information about your network?

        • What is the policy for the sessions? Can you share the session output? dia sys session list
        • Can you snapshot the current bandwidth of the outgoing interface where you set QoS?
        • Can you share the configuration of QOS configure ?

        If you can, please share it through my official email: bhoang@fortinet.com.

         

        Regards

        Bill

          bokelsu1
          bokelsu1
          New Member
          April 5, 2025

          The profile needs to be attached to the interface and the interface needs a bandwidth estimate but that's not the "estimated bandwidth" where you set it. That's just for reports. "outbandwidth needs to be set either via CLI or further down in the GUI

          Sadhi_Jayz
          Sadhi_JayzAuthor
          Explorer
          April 5, 2025

          Hi bokelsu1,

           

          I have already applied the interface outbound bandwidth and traffic shaping profile.

           

           

          IMG_20250405_165211.jpg

           

           

           

           

          UniMK
          UniMK
          Explorer
          April 9, 2025

          I was going to create basically the same topic, the Fortigate tool, Traffic Shaping Profiles, is also not working on my firewall.
          These are the configurations made:

           

          Traffic Shaping ProfileTraffic Shaping Profile

           

          Traffic Shaping PolicyTraffic Shaping Policy

           

          image.png

          I

          In my case the equipment is 100F version v7.4.3 build2573 (Feature)

          And apparently the Traffic Shapers(Shared shaper, Reverse shaper and Per-lP shaper) rules work

          BillH_FTNT
          Staff
          BillH_FTNT
          Staff
          April 9, 2025

          Hi UniMK

          Can you use only Shaping Profile to make a test ?

          Bill

            UniMK
            UniMK
            Explorer
            April 9, 2025

            First of all, thank you for your feedback and collaboration.
            Yes, I previously tested just leaving "Traffic Shaping Profiles" on and it didn't work, but since I needed to restrict the amount of traffic, I had to try Traffic Shapers, but I would like to have Traffic Shaping Profiles working for more efficient bandwidth control.

            Sadhi_Jayz
            Sadhi_JayzAuthorAnswer
            Explorer
            April 20, 2025

            Hi Fortinet Community,

            Just wanted to provide an update and share the solution that worked for us, in case anyone else encounters a similar issue.

            Thanks to Fortinet TAC support, we were able to resolve the issue. Below is the complete configuration that worked for us to implement traffic shaping using Traffic Shaping Profiles.

             

            1. Create a Traffic Shaping Profile.

             

            2. Define Class IDs with guaranteed/maximum bandwidth percentages within the shaping profile.

             

            3. Create Traffic Shaping Policy and Assign a Class ID.

             

            4. Configure Interface Bandwidth


            On the relevant outgoing interface:

             

            set outbandwidth <value_in_kbps> # Upload bandwidth
            set inbandwidth <value_in_kbps> # Download bandwidth

             

             

            6. Assign the Traffic Shaping Profile to the Outgoing Interface

             

            set egress-shaping-profile <profile_name>
            set ingress-shaping-profile <profile_name>

             

            7. Disable ASIC Offloading in the Relevant Firewall Policy

             

            set auto-asic-offload disable

             

            After applying the above steps, traffic shaping started to work correctly and bandwidth controls were enforced as expected.

             

            Hope this helps anyone facing a similar challenge.

             

            Big thanks to Fortinet TAC and special shout-out to @BillH_FTNT  for doing his best to assist!

             

            Cheers,
            Sadhi.

            Terms & ConditionsAccessibility statement