| Description |
This article describes generating a simple client-server flow through a FortiGate in a lab.
Simple flow, because this is not for testing performance issues: if someone needs to test performances, use a real FortiTester appliance.
The FortiTester is a KVM (ESXi VMs are not always working depending on the labs used).
The tested FortiGate can be a VM or a real appliance.
|
| Solution |
The original need comes from the field, an administrator reporting that the FGCP cluster is not failing-over RDP, FTP, and SSH connections during an upgrade phase when pushed from the FortiManager.
So, the simplest way to focus on the upgrade-test and not traffic-generation, is to build this lab and use FortiTester to generate RDP, FTP, SSH, and HTTP traffic in a loop where the FortiGate sits between the Client-part of the FortiTester (VLAN491) and the Server-part of the same FortiTester (VLAN492).
- Install FortiTester (7.4.3) and connect port1 to VLAN491, port2 to VLAN492:
Note: VLAN491 and VLAN492 are private VLANs dedicated to personal use, reserved in a lab. It can be any other reserved dedicated VLAN.
-
Log in to FortiTester and select the 'System Settings' icon.
Then Network -> Interfaces and check that port1 and port2 are UP (on FortiTester on ESXi, it never showed up).
-
In FortiLab, connect the DUT (Device Under Test) or FortiGate to respective port1 -> VLAN491 and port2 -> VLAN492.
Note: It can be any other port on the FortiGate device, of course.
For simplification, VLAN491 is subnet 10.4.91.0/24.
For simplification, VLAN492 is subnet 10.4.92.0/24.
Here is the diagram of the constructed simple network topology:
-
On FortiGate, define appropriate addresses, and policies and authorize the traffic.
-
On FortiTester, select the 'Performance' icon.
First define the mapping of the interfaces of FortiTester (which port is the client, which one is the server) by selecting 'Performance Testing -> Objects -> Port Mapping'.
Select 'Create New' and make it as basic as this one:
Second, create the 'Networks' that need to be simulated by FortiTester by selecting 'Performance Testing > Objects > Networks' and make it as basic as this one:
Here, simulated client 10.4.91.1 with send traffic to simulated server 10.4.92.1 through default gateway 10.4.91.163 (FortiGate cluster).
Third, create the test, for instance, 'HTTP -> CPS' that needs to be simulated by FortiTester by selecting 'Performance Testing -> HTTP -> CPS' and make it as basic as this one :
- 'Basic Information' frame: for a 10-minute run:
- 'Network settings' frame:
Select 'Save Global Port Setting/Network Config:' and '/Port Mapping:' just created in the previous steps.
-
Select 'Save' and 'Start' and see the progress in real-time:
When it is running, select the generated report to display the full results.
Related articles:
|
