FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Nishtha_Baria
Article Id 276094
Description This knowledge base article provides a step-by-step guide on how to troubleshoot and diagnose issues related to 5G SIM cards and LTE modems on a FortiGate device using Command Line Interface (CLI) commands.
Scope FortiGate, LTE.
Solution
FortiGate devices with a 5G SIM card and LTE modem support provide critical connectivity options for remote and backup networking. However, issues may arise that affect the functionality of these connections. Troubleshooting using the CLI can help diagnose and resolve such problems effectively.
 
Troubleshooting 5G SIM Card and LTE Modem Issues:
Log in to the FortiGate device using SSH or another remote access method with administrative privileges.
 
  1. Collect Modem and SIM Card Information. Use the following commands to gather information about the connected 5G SIM card and LTE modem:

diag sys lte-modem modem-details

 

Displays detailed information about the connected LTE modem, including its model, firmware version, and other relevant details.

 

diag sys lte-modem sim-info

 

Provides information about the SIM card inserted into the LTE modem, including ICCID (Integrated Circuit Card Identifier), IMSI (International Mobile Subscriber Identity), and other SIM-related details.

 

diag sys lte-modem signal-info

 

Shows signal strength and quality information for the LTE modem, including metrics like RSSI (Received Signal Strength Indicator) and RSRP (Reference Signal Received Power).

 

diag sys lte-modem data-session-info

 

Provides details about the active data session on the LTE modem, including IP address assignment and session status.

 

exe lte-modem wireless-profile list

 

Lists the available wireless profiles for the LTE modem, which may include APN (Access Point Name) settings and other wireless configuration parameters.

 

fnsysctl ifconfig wwan

 

Displays information about the WWAN (Wireless Wide Area Network) interface, which is often associated with LTE modem connectivity.

 

  1. Check Network Connectivity: Use standard networking tools like `ping` and `traceroute` to test connectivity from the FortiGate device to external destinations via the 5G SIM card and LTE modem connection. This can help pinpoint where connectivity issues are occurring.
execute ping <destination-ip>
execute traceroute <destination-ip>
 
Replace `<destination-ip>` with the IP address you want to test connectivity to.
 
  1. Enable LTE Debugging. To gather more detailed information for troubleshooting, enable LTE debugging using the following commands:
diag debug disable
diag debug reset
diag debug console time enable
diag debug app lted -1
diag debug enable
 
  1. Monitor LTE Debug Output. Wait for about 5 minutes while the debugging output is generated. During this time, periodically run the following command to view the LTE daemon debug output and gather information about potential issues:

 

diag test application lted 9

 

  1. Disable LTE Debugging. After collecting sufficient debugging information, disable LTE debugging using the following command:

 

diag debug disable

 
Conclusion:
 
Troubleshooting 5G SIM card and LTE modem issues on a FortiGate device using CLI commands can help identify and resolve various problems that may affect network connectivity. Following these steps and reviewing the relevant information will assist in efficiently diagnosing and addressing connectivity issues.
Always exercise caution when running debugging commands and perform these changes during a maintenance window to minimize disruption to FortiGate operations.

Note: Be aware that in 4G and above, the circuit-switched infrastructure is abandoned and only a packet-switched network is provided.