hi,
I need to run a test with iperf3 on my backup link that is configured on interface 'A'. But when I run the iperf test the test ends up running on the wan interface (main link). What am I doing wrong?
FRWF2A # diagnose traffictest show
server-intf: a
client-intf: a
port: 5201
proto: TCP
diagnose traffictest run -R -c 189.7.204.140 -t 30
FRWF2A # diagnose sniffer packet any 'host 189.7.204.140' 4
interfaces=[any]
filters=[host 189.7.204.140]
3.361560 wan out 10.22.22.10.17926 -> 189.7.204.140.5201: syn 4277816893
4.358916 wan out 10.22.22.10.17926 -> 189.7.204.140.5201: syn 4277816893
6.358929 wan out 10.22.22.10.17926 -> 189.7.204.140.5201: syn 4277816893
10.368913 wan out 10.22.22.10.17926 -> 189.7.204.140.5201: syn 4277816893
thanks
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello mateusguilherme,
The Iperf server should be reachable from Interface which you want to test with, let's assume in your case it is "A" then from that interface the server you're selecting should be reachable. otherwise, it will give unexpected or incorrect results, If your "A" interface is LAN or Internal Interface then configure an Iperf server in your Internal Lan and use that server as the destination in the Iperf test it will work, hope this clarifies your concern if "A" Interface is having Internet connectivity then configure a route to the public Iperf server using "A" Interface.
Hi mateusguilherme,
Are you seeing any logs for the below command:
diagnose traffictest run -R -c 189.7.204.140 -t 30
Seems like you are trying to reach a public IP, the route will be available through the internet facing interface and hence it might show the wan interface in the sniffer debug.
Could you check the routing entry for the destination if it is the port that you have specified in the traffictest.
Regards,
Vimala
hi
I'm not seeing any logs. But the advanced debug output is this:
FRWF2A # diagnose debug enable
FRWF2A # diagnose debug flow filter addr 189.7.204.140
FRWF2A # diagnose debug flow show function-name enable
show function name
FRWF2A # diagnose debug flow trace start 30
FRWF2A # id=20085 trace_id=139 func=print_pkt_detail line=5727 msg="vd-root:0 received a packet(proto=6, 10.22.22.10:1164->189.7.204.140:5201) from local. flag [S], seq 615420862, ack 0, win 65535"
id=20085 trace_id=139 func=init_ip_session_common line=5898 msg="allocate a new session-31662abd"
id=20085 trace_id=139 func=ipd_post_route_handler line=490 msg="out wan vwl_zone_id 1, state2 0x0, quality 0.
"
id=20085 trace_id=140 func=print_pkt_detail line=5727 msg="vd-root:0 received a packet(proto=6, 10.22.22.10:1164->189.7.204.140:5201) from local. flag [S], seq 615420862, ack 0, win 65535"
id=20085 trace_id=140 func=resolve_ip_tuple_fast line=5808 msg="Find an existing session, id-31662abd, original direction"
id=20085 trace_id=140 func=ipd_post_route_handler line=490 msg="out wan vwl_zone_id 1, state2 0x0, quality 0.
"
id=20085 trace_id=141 func=print_pkt_detail line=5727 msg="vd-root:0 received a packet(proto=6, 10.22.22.10:1164->189.7.204.140:5201) from local. flag [S], seq 615420862, ack 0, win 65535"
id=20085 trace_id=141 func=resolve_ip_tuple_fast line=5808 msg="Find an existing session, id-31662abd, original direction"
id=20085 trace_id=141 func=ipd_post_route_handler line=490 msg="out wan vwl_zone_id 1, state2 0x0, quality 0.
"
id=20085 trace_id=142 func=print_pkt_detail line=5727 msg="vd-root:0 received a packet(proto=6, 10.22.22.10:1164->189.7.204.140:5201) from local. flag [S], seq 615420862, ack 0, win 65535"
id=20085 trace_id=142 func=resolve_ip_tuple_fast line=5808 msg="Find an existing session, id-31662abd, original direction"
id=20085 trace_id=142 func=ipd_post_route_handler line=490 msg="out wan vwl_zone_id 1, state2 0x0, quality 0.
"
The 'a' interface is connected to a modem which provides a backup internet link in case the main link on the 'wan' port fails.
My routing table shows:
Routing table for VRF=0
S* 0.0.0.0/0 [1/0] via 138.99.22.105, wan
[1/0] via 10.22.22.254, a
Hello mateusguilherme,
The Iperf server should be reachable from Interface which you want to test with, let's assume in your case it is "A" then from that interface the server you're selecting should be reachable. otherwise, it will give unexpected or incorrect results, If your "A" interface is LAN or Internal Interface then configure an Iperf server in your Internal Lan and use that server as the destination in the Iperf test it will work, hope this clarifies your concern if "A" Interface is having Internet connectivity then configure a route to the public Iperf server using "A" Interface.
Hi
I had to create a static route to point to the IPERF server address specifying interface 'a' as the output.
thanks
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1641 | |
1069 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.