Technical Tip: Enabling traffic shaping on a hyperscale firewall under 'config system npu'

[sfernando]

Description	This article describes how traffic shaping can be enabled on a hyperscale firewall.
Scope	Hyperscale firewall and below v7.0.11.
Solution	In a hyperscale firewall when hyperscale licenses are enabled it is not possible to select shaping for 'set default-qos-type' under 'config system npu'. FortiGate-1801F # config sys npu FortiGate-1801F (npu) # set default-qos-type policing   To change the configuration to shaping, it is required to disable hyperscale license as below: exec hscalefw-license XXXXXXXXXXXXXXXXXX Once done, it is required to change the below setting too: Config system npu     set policy-offload-level disable  Both options are available for selection. FortiGate-1801F (npu) # set default-qos-type ? policing QoS type policing. shaping QoS type shaping. Note: Starting from v7.2.11, v7.4.8 GA , v7.6.1 3 GA; the option 'default-qos-type' under 'config system npu' no longer supports shaping, and the only selection for this option is policing. For further information on the behavior change, refer to the following: Technical Tip: Important Changes to Traffic Shaping on FortiGate with NP7 Queuing-Based Traffic Mana...