FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ojacinto
Staff
Staff
Article Id 351639
Description This article provides specific CLI commands to review how the memory usage is distributed on the cw_acd process (wireless process) on FortiGate.
Scope FortiGate v7.4.0 and later.
Solution

The cw_acd process is used to handle communication between FortiGate and APs. In some cases, this process can consume a lot of memory causing FortiGate to enter in conserve mode.

 

If high memory usage is detected by the cw_acd process, the following commands can be executed on Fortigate CLI to get information about the memory usage on this process:

 

fnsysctl date
get sys performance status
diag hardware sysinfo memory
diag hardware sysinfo slab
diag hardware sysinfo conserve
diag sys top-mem 30
diag sys top 5 30 6
<----- Hit 'm' to order the processes by memory usage.

get wireless-controller status
diagnose wireless wlac -c mpmt
diagnose wireless-controller wlac -c stats
diagnose wireless-controller wlac -p 0 -c stats
diagnose wireless-controller wlac -p 1 -c stats
diagnose wireless-controller wlac -p 2 -c stats
diagnose wireless-controller wlac -p 3 -c stats
diagnose wireless-controller wlac -p 4 -c stats
diagnose wireless-controller wlac -p 5 -c stats
diagnose wireless-controller wlac -p 6 -c stats
diagnose wireless-controller wlac -p 7 -c stats

 

Use these commands on the Teraterm script to automatically get the CLI information along a scheduled time to validate if the memory in increasing due to the cw_acd process.

 

In addition to the above commands, wireless global settings and timers can be modified under:


config wireless-controller global
config wireless-controller timers

 

Related article:

Technical Tip: FortiGate monitoring script
Contributors