|
Problem: When enabling traffic shaping on a FortiGate device with system version 7.0.12, network access is lost.
Solution:
- Before proceeding, make sure to back up the configuration.
- Access the FortiGate CLI.
- Enter the following commands:
config system npu
set default-qos-type policing
end
- Reboot the device for the changes to take effect.
Note: When modifying the default QoS type to policing, it leverages the TPE module. This means a restart of the FortiGate device is mandatory.
The 'set default-qos-type policing' command, when used within the FortiGate device's CLI, pertains to the way Quality of Service (QoS) is handled in the context of traffic management.
Command breakdown:
-
default-qos-type: This refers to the default method or mechanism by which Quality of Service (QoS) is applied to network traffic on the device.
-
policing: This is a specific type of QoS management. When policing traffic, a strict limit is set on the rate of traffic. Any traffic that exceeds this limit can be either dropped or remarked (changing the QoS value) so it might get dropped later in the network.
Below is a more detailed explanation of policing:
Policing: Policing is a traffic management approach where traffic rates are monitored, and actions are taken on packets once they exceed the configured rate limits. The typical actions include:
- Dropping: Excess packets can be dropped immediately once they exceed the defined rate.
- Remark: Instead of dropping, excess packets can have their QoS values changed (for example, their Differentiated Services Code Point, or DSCP, values). This might result in them getting lower priority treatment elsewhere in the network.
Using policing effectively creates a 'hard ceiling' for traffic, ensuring that it does not exceed specified limits. However, one downside is that the immediate dropping of packets can lead to increased retransmissions and reduced application performance, depending on the nature of the traffic.
In the context of the FortiGate command provided (set default-qos-type policing), this would mean that the default behavior for handling QoS on the device would be to use the policing mechanism. It will be especially relevant when the device is set up for traffic shaping, as it dictates how exceeding traffic would be treated.
|
