Interface Bandwidth Counters Not Working - Shaper Class-ID

[Adam549654]

We have a remote firewall setup (60E) to handle traffic from a remote location and route *ALL* of it back to us at the main location.

I have a traffic shaping profile setup to limit the bandwidth (ingress and egress) to 300 Mbps.  I also have a traffic shaping profile to allow all traffic at the remote location to use all 300 Mbps of the bandwidth, but guarantee 250 Mbps.  The other 50 Mbps is reserved for a backup server for offsite backups, but is allowed to use up to 150 Mbps.

The issue seems to be that the interface isn't "seeing" the bandwidth being used.

So it's clear:

Backup server = class-id 2

Everyone else = class-id 3

Remote backup showing 500+ Mbps being used via task manager, interface showing 0 Mbps:

West-FG # diagnose netlink interface list wan1

 

if=wan1 family=00 type=1 index=5 mtu=1500 link=0 master=0

ref=28 state=start present fw_flags=0 flags=up broadcast run multicast 

Qdisc=mq hw_addr=e0:23:ff:29:15:38 broadcast_addr=ff:ff:ff:ff:ff:ff

inbandwidth=300000(kbps) total_bytes=0 drop_bytes=0

egress traffic control:

 bandwidth=300000(kbps) lock_hit=0 default_class=3 n_active_class=2

 class-id=2 allocated-bandwidth=30000(kbps) guaranteed-bandwidth=30000(kbps)

 max-bandwidth=150000(kbps) current-bandwidth=0(kbps)

 priority=low forwarded_bytes=437K

 dropped_packets=0 dropped_bytes=0

 class-id=3 allocated-bandwidth=270000(kbps) guaranteed-bandwidth=270000(kbps)

 max-bandwidth=300000(kbps) current-bandwidth=27643(kbps)

 priority=high forwarded_bytes=876416K

 dropped_packets=0 dropped_bytes=0

stat: rxp=17096541139 txp=5805793460 rxb=22405300900511 txb=3817197781212 rxe=0 txe=0 rxd=0 txd=0 mc=0 collision=0

re: rxl=0 rxo=0 rxc=0 rxf=0 rxfi=0 rxm=0

te: txa=0 txc=0 txfi=0 txh=0 txw=0

misc rxc=0 txc=0

input_type=0 state=3 arp_entry=0 refcnt=28

If I put the shaper profile in place, the current bandwidth still shows 0 Mbps, but the backup server starts consuming the entire connection, hitting close to 600 Mbps.

Same goes for traffic for everyone else, it isn't showing the correct bandwidth being used while running a speedtest on a client.

I have a standard shaper holding things at bay, but I would like to get these shaper class-id's working.

[Toshi_Esumi]

You most likely need to open a ticket and ask TAC to take a look at your design and config. We never used shaping profile because our situation is always with IPsec VPN, which has separate logical interface so we had doubt the interface based bandwidth settings would work. We always use regular shapers applied to shaping-policies.

I'm assuming your situation is the same. If traffic goes into the "tunnel" interface, it might not be counted as traffic to "wan1" interface. TAC would tell you if I'm wrong.