Technical Tip: How to check the packet counter on the ISF (Integrated Switch Fabric) in a Marvell chip on FortiGate

[ysatake]

Description	This article describes how to check the packet counter on the ISF (Integrated Switch Fabric) in a Marvell chip in FortiGate.
Scope	FortiGate 40xF, 60xF,v 7.0.x, v7.2.x, v7.4.x, v7.6.x.
Solution	The packet counter of the ISF (Integrated Switch Fabric), which refers to the Marvell chip, can be checked using the following method. Check which Marvell Switch port the front panel port for counter verification is mapped to. In the following example, port1 is mapped to 0/25. diagnose npu np7 port-list Connect to the Marvell CLI using the following command to retrieve the counters. diagnose sys mvl cli Execute the following command to display the counters. do show interfaces mac counters ethernet <port number> To check whether any packet drops are occurring in the ISF, use the following commands. debug show drop counters 0 exit                 <----- After retrieving the information, always exit using ‘exit’. After collecting all logs, disconnect from the Marvell CLI using the following command. CLIexit Related documents: FortiGate 400F and 401F fast path architecture | FortiGate / FortiOS 7.6.2 | Fortinet Document Libra... FortiGate 600F and 601F fast path architecture | FortiGate / FortiOS 7.6.2 | Fortinet Document Libra...