- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
FG 50E v6.2.12 Download Speed much lower than upload
Hi All,
I have a strange problem with our Fortigate 50E. The router works with a fiber connection, wan interface configured as a VLAN, PPPoE.
Router worked properly about 4 years, including one year with fiber. The max speed was 300Mbps / 70 Mbps (DL/UL)
Two months ago I noticed that DL speed decreased to 30Mbps, now its only about 4Mbps
I've checked cables, I also connected router of ISP (when ISP's router was connected the speed returned to 300/70)
Is there something that shoud I check with my FG50?
regards,
- Labels:
-
FortiGate
Nominate a Forum Post for Knowledge Article Creation
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi!
Try an iperf speedtest over the CLI:
diag traffictest server-intf wan1
diag traffictest client-intf wan1
diag traffictest port 9211
diag traffictest run -R -c 178.215.228.109
Maybe you need to change the interface to wan2 or any other interface you use as your wan interface. You can also use any other public iperf server and his port.
BR
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I got such a response:
PL-ROF-FG50E # diagnose traffictest server-intf wanx
server-intf: wan2
PL-ROF-FG50E # diag traffictest client-intf wanx
client-intf: wan2
PL-ROF-FG50E # diag traffictest port 9211
port: 9211
PL-ROF-FG50E # diagnose traffictest run -R -c 178.215.228.109
Can not find ip (wan2)
Command fail. Return code -1
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You wrote "diag traffictest server-intf wanx"so the FGT took wan2 try it with wan1 please.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi rafal0001,
Please validate if you using any traffic shaper which can limit the speed for the users. Also you can validate what is the overall bandwidth utilization on wan/isp link when you are facing the issue, as when you connect direct pc to ISP router only single user traffic will be there. And when connected behind fortigate multiple users can utilize the link.
Also you can validate the speed and duplex settings on the wan interface which is connected to the isp router. Also check if there are any drops/error at the interface level.
fnsysctl ifconfig interface-name -----> to check if there are any drops on FIrtigate interface
get hardware nic port1 -----> To check duplex settings
You can refer to below KB regarding Low-throughput-troubleshooting
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Low-throughput-troubleshooting/ta-p/217967
Regard's,
Pratik
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Please validate if you using any traffic shaper which can limit the speed for the users.
How to do it?
Also you can validate what is the overall bandwidth utilization on wan/isp link when you are facing the issue, as when you connect direct pc to ISP router only single user traffic will be there. And when connected behind fortigate multiple users can utilize the link.
Also you can validate the speed and duplex settings on the wan interface which is connected to the isp router.
I connected only one PC to the LAN side, the effect is the same: 4M (DL) 60M (UL)
Also check if there are any drops/error at the interface level.
PL-ROF-FG50E # fnsysctl ifconfig wan2
wan2 Link encap:Ethernet HWaddr 90:6C:AC:ED:FA:88
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:304659612 errors:0 dropped:0 overruns:0 frame:0
TX packets:157165022 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:532
RX bytes:370622720258 (345.2 GB) TX bytes:42500476344 (39.6 GB)
Interrupt:195
PL-ROF-FG50E # get hardware nic wan2
Description Marvell NETA Gigabit Ethernet driver 00000010
System_Device_Name wan2
Current_HWaddr 90:6c:ac:ed:fa:88
Permanent_HWaddr 90:6c:ac:ed:fa:88
State up
Link up
Speed 1000
Duplex full
Rx_Packets 304726238
Tx_Packets 157226047
Rx_Bytes 1326958656
Tx_Bytes 3884233739
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I believe my device is broken.
Disconnected from main location, I reset it to factory settings and made a nat between two private subnets. Then I tried to download a large file from subnet behind nat (both sides 1Gbps)
The transfer was 700kB/s max and fluctuated to zero.
What do you think?
Regards
Rafal
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Rafal,
Could you please verify the part number of this unit by the following command "get sys status".
Regards.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can repair it, just heat the CPU with a hot air gun which will resolder the solders under the CPU. The problem comes from the ball solders under the CPU which degrade over time, you just have to melt them for a few seconds for the FG50E LAN ports to work again :
See more here : https://community.fortinet.com/t5/Support-Forum/Fortigate-50E-Dying-Packet-loss-and-lan-ports-stop-f...