- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Traffic Shaping Profiles are Not Working
Hi Fortinet Community,
We're facing an issue where traffic shaping on our FortiGate device doesn't seem to be working as expected. Despite setting up the necessary configurations, no traffic appears to be shaped — the system always shows current-bandwidth=0(kbps) when monitoring shaping statistics.
What We’ve Verified So Far:
1. Class IDs are configured correctly.
2. Traffic Shaping Profile is set up and active.
3. Relevant Traffic Shaping Policy is in place.
4. Interface outbound bandwidth is configured.
5. Traffic Shaping Profile is applied to the correct interface.
6. Ran "diagnose netlink interface list" command
No matter what we try, shaping stats show zero usage:
Any help or insights would be greatly appreciated.
Thanks in advance!
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Fortinet Community,
Just wanted to provide an update and share the solution that worked for us, in case anyone else encounters a similar issue.
Thanks to Fortinet TAC support, we were able to resolve the issue. Below is the complete configuration that worked for us to implement traffic shaping using Traffic Shaping Profiles.
1. Create a Traffic Shaping Profile.
2. Define Class IDs with guaranteed/maximum bandwidth percentages within the shaping profile.
3. Create Traffic Shaping Policy and Assign a Class ID.
4. Configure Interface Bandwidth
On the relevant outgoing interface:
set outbandwidth <value_in_kbps> # Upload bandwidth
set inbandwidth <value_in_kbps> # Download bandwidth
6. Assign the Traffic Shaping Profile to the Outgoing Interface
set egress-shaping-profile <profile_name>
set ingress-shaping-profile <profile_name>
7. Disable ASIC Offloading in the Relevant Firewall Policy
set auto-asic-offload disable
After applying the above steps, traffic shaping started to work correctly and bandwidth controls were enforced as expected.
Hope this helps anyone facing a similar challenge.
Big thanks to Fortinet TAC and special shout-out to @BillH_FTNT for doing his best to assist!
Cheers,
Sadhi.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Please run below debug command and check result.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello,
This command does not work because I have configured traffic shaping profiles (class IDs and traffic shaping policies), but no traffic shapers are configured.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Sadhi Jayz,
What is version running on the box?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello Harry,
The device is a FortiGate-601F running firmware version v7.6.2, build 3462 (Feature Release).
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Sadhi,
Can you share some more information about your network?
- What is the policy for the sessions? Can you share the session output?
dia sys session list
- Can you snapshot the current bandwidth of the outgoing interface where you set QoS?
- Can you share the configuration of QOS configure ?
If you can, please share it through my official email: bhoang@fortinet.com.
Regards
Bill
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The profile needs to be attached to the interface and the interface needs a bandwidth estimate but that's not the "estimated bandwidth" where you set it. That's just for reports. "outbandwidth needs to be set either via CLI or further down in the GUI
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi bokelsu1,
I have already applied the interface outbound bandwidth and traffic shaping profile.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I was going to create basically the same topic, the Fortigate tool, Traffic Shaping Profiles, is also not working on my firewall.
These are the configurations made:
Traffic Shaping Profile
Traffic Shaping Policy
I
In my case the equipment is 100F version v7.4.3 build2573 (Feature)
And apparently the Traffic Shapers(Shared shaper, Reverse shaper and Per-lP shaper) rules work
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi UniMK
Can you use only Shaping Profile to make a test ?
Bill
