Technical Tip : Enabling traffic shaping on a hyperscale firewall under 'config system npu'

[sfernando]

Description	This article describes how traffic shaping can be enabled on a hyperscale firewall.
Scope	Hyperscale firewall and below v7.0.11.
Solution	In a hyperscale firewall when hyperscale licenses are enabled it is not possible to select shaping for 'set default-qos-type' under 'config system npu'. FortiGate-1801F # config sys npu FortiGate-1801F (npu) # set default-qos-type policing   To change the configuration to shaping, it is required to disable hyperscale license as below: exec hscalefw-license XXXXXXXXXXXXXXXXXX Once done, it is required to change the below setting too: Config system npu     set policy-offload-level disable  Both options are available for selection. FortiGate-1801F (npu) # set default-qos-type ? policing QoS type policing. shaping QoS type shaping. Note: Since v7.2.11, the default behavior has been changed for these options where shaping is not available: Technical Tip: Important Changes to Traffic Shaping on FortiGate with NP7 Queuing-Based Traffic Mana...