Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mateusguilherme
New Contributor II

help with iperf and 'a' interface

hi,

 

I need to run a test with iperf3 on my backup link that is configured on interface 'A'. But when I run the iperf test the test ends up running on the wan interface (main link). What am I doing wrong?

 

FRWF2A # diagnose traffictest show
server-intf: a
client-intf: a
port: 5201
proto: TCP

 

diagnose traffictest run -R -c 189.7.204.140 -t 30

 

FRWF2A # diagnose sniffer packet any 'host 189.7.204.140' 4
interfaces=[any]
filters=[host 189.7.204.140]
3.361560 wan out 10.22.22.10.17926 -> 189.7.204.140.5201: syn 4277816893
4.358916 wan out 10.22.22.10.17926 -> 189.7.204.140.5201: syn 4277816893
6.358929 wan out 10.22.22.10.17926 -> 189.7.204.140.5201: syn 4277816893
10.368913 wan out 10.22.22.10.17926 -> 189.7.204.140.5201: syn 4277816893

 

thanks

1 Solution
vsahu
Staff
Staff

Hello mateusguilherme,

 

The Iperf server should be reachable from Interface which you want to test with, let's assume in your case it is "A" then from that interface the server you're selecting should be reachable.  otherwise, it will give unexpected or incorrect results, If your "A" interface is LAN or Internal Interface then configure an Iperf server in your Internal Lan and use that server as the destination in the Iperf test it will work, hope this clarifies your concern if "A" Interface is having Internet connectivity then configure a route to the public Iperf server using "A" Interface.

Regards,
Vishal

View solution in original post

4 REPLIES 4
kvimaladevi
Staff
Staff

Hi mateusguilherme,

 

Are you seeing any logs for the below command:

 

diagnose traffictest run -R -c 189.7.204.140 -t 30

 

Seems like you are trying to reach a public IP, the route will be available through the internet facing interface and hence it might show the wan interface in the sniffer debug.

 

Could you check the routing entry for the destination if it is the port that you have specified in the traffictest.

 

Regards,

Vimala

mateusguilherme

hi 

 

I'm not seeing any logs. But the advanced debug output is this:

 

FRWF2A # diagnose debug enable

FRWF2A # diagnose debug flow filter addr 189.7.204.140

FRWF2A # diagnose debug flow show function-name enable
show function name

FRWF2A # diagnose debug flow trace start 30

FRWF2A # id=20085 trace_id=139 func=print_pkt_detail line=5727 msg="vd-root:0 received a packet(proto=6, 10.22.22.10:1164->189.7.204.140:5201) from local. flag [S], seq 615420862, ack 0, win 65535"
id=20085 trace_id=139 func=init_ip_session_common line=5898 msg="allocate a new session-31662abd"
id=20085 trace_id=139 func=ipd_post_route_handler line=490 msg="out wan vwl_zone_id 1, state2 0x0, quality 0.
"
id=20085 trace_id=140 func=print_pkt_detail line=5727 msg="vd-root:0 received a packet(proto=6, 10.22.22.10:1164->189.7.204.140:5201) from local. flag [S], seq 615420862, ack 0, win 65535"
id=20085 trace_id=140 func=resolve_ip_tuple_fast line=5808 msg="Find an existing session, id-31662abd, original direction"
id=20085 trace_id=140 func=ipd_post_route_handler line=490 msg="out wan vwl_zone_id 1, state2 0x0, quality 0.
"
id=20085 trace_id=141 func=print_pkt_detail line=5727 msg="vd-root:0 received a packet(proto=6, 10.22.22.10:1164->189.7.204.140:5201) from local. flag [S], seq 615420862, ack 0, win 65535"
id=20085 trace_id=141 func=resolve_ip_tuple_fast line=5808 msg="Find an existing session, id-31662abd, original direction"
id=20085 trace_id=141 func=ipd_post_route_handler line=490 msg="out wan vwl_zone_id 1, state2 0x0, quality 0.
"
id=20085 trace_id=142 func=print_pkt_detail line=5727 msg="vd-root:0 received a packet(proto=6, 10.22.22.10:1164->189.7.204.140:5201) from local. flag [S], seq 615420862, ack 0, win 65535"
id=20085 trace_id=142 func=resolve_ip_tuple_fast line=5808 msg="Find an existing session, id-31662abd, original direction"
id=20085 trace_id=142 func=ipd_post_route_handler line=490 msg="out wan vwl_zone_id 1, state2 0x0, quality 0.
"

 

The 'a' interface is connected to a modem which provides a backup internet link in case the main link on the 'wan' port fails.

 

My routing table shows:

 

Routing table for VRF=0
S* 0.0.0.0/0 [1/0] via 138.99.22.105, wan
                    [1/0] via 10.22.22.254, a

 

 

vsahu
Staff
Staff

Hello mateusguilherme,

 

The Iperf server should be reachable from Interface which you want to test with, let's assume in your case it is "A" then from that interface the server you're selecting should be reachable.  otherwise, it will give unexpected or incorrect results, If your "A" interface is LAN or Internal Interface then configure an Iperf server in your Internal Lan and use that server as the destination in the Iperf test it will work, hope this clarifies your concern if "A" Interface is having Internet connectivity then configure a route to the public Iperf server using "A" Interface.

Regards,
Vishal
mateusguilherme

Hi

 

I had to create a static route to point to the IPERF server address specifying interface 'a' as the output.

 

thanks

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors