FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ysatake
Staff
Staff
Article Id 384191
Description This article describes how to check the packet counter on the ISF (Integrated Switch Fabric) in a Marvell chip in FortiGate.
Scope FortiGate 40xF, 60xF,v 7.0.x, v7.2.x, v7.4.x, v7.6.x.
Solution

The packet counter of the ISF (Integrated Switch Fabric), which refers to the Marvell chip, can be checked using the following method.

 

Check which Marvell Switch port the front panel port for counter verification is mapped to. In the following example, port1 is mapped to 0/25.

 

diagnose npu np7 port-list

 

image.png

 

Connect to the Marvell CLI using the following command to retrieve the counters.

 

diagnose sys mvl cli

 

image.png

 

Execute the following command to display the counters.

 

do show interfaces mac counters ethernet <port number>

 

image.png


To check whether any packet drops are occurring in the ISF, use the following commands.

 

debug
show drop counters 0

 

image.png

 

exit                 <----- After retrieving the information, always exit using ‘exit’.

 

 

To check ISF allocate information, run the following commands:

 

show tail-drop device 0

show tail-drop-allocated buffers all

 

To see a traffic trace, run the following command:

 

show counters packet-trace device 0

 

2025-11-26 09 12 56.png

To check traffic trace from a specific interface, run the following commands. The example below is port1. The SW_port_id of port1 is 29.

 

2025-11-26 09 28 23.png

 

configure
interface ethernet 0/29
counters packet-trace source-port
counters packet-trace destination-port
end

 

show counters packet-trace device 0 

 
2025-11-26 09 30 58.png

 

After collecting all logs, disconnect from the Marvell CLI with the following command.

 

CLIexit

 

Related documents:

FortiGate 400F and 401F fast path architecture | FortiGate / FortiOS 7.6.2 | Fortinet Document Libra...

FortiGate 600F and 601F fast path architecture | FortiGate / FortiOS 7.6.2 | Fortinet Document Libra...