fortigate 60E Not able to reach 1Gbs

[leblanda]

Hi guys,

I just try to troubleshoot internal bandwith issue.

So here my setup.

WAN2 = internet speed test can cap my 150Mbs internet service

WAN1= Forti AP

DMZ = Unraid NAS

Internal hardware= different PC and Raspberry PI

All port are 1000Mbs full duplex

When I copy a large file from or to my NAS I can only get 100Mbs 

When I do a IPERF3 test from my NAS to my PC same 100Mbs

When I do an IPERF3 from DMZ  port (in fortigate CLI) to my PC (internal hardware switch port)I only get 260Mbs

When I do an IPERF3 from DMZ  port (in fortigate CLI) to my NAS (DMZ port)I only get 460Mbs

When I do the IPERF test from Fortigate to my PC CPU core peak at  core #1 40% core #2 100% core #3 and #4 1%

When I do the test from PC to NAS the fortigate CPU is 1-2 % range on all core.

again all port are 1000Mbs

So my goal is to be able to reach 1Gbs when connected trough my NAS

Any though?

Thanks

[leblanda]

I did change many things in my 60E at the begining.

One thing i'm not sure in the config

Is it normal to have a virtual switch with an hardware switch like this?

Thanks

edit "internal" set vdom "root" set ip 192.168.2.1 255.255.255.0 set allowaccess ping https ssh http fgfm capwap set type hard-switch set stp enable set device-identification enable set role lan set snmp-index 6 next end config system physical-switch edit "sw0" set age-val 0 next end config system virtual-switch edit "internal" set physical-switch "sw0" config port edit "internal1" next edit "internal2" next edit "internal3" next edit "internal4" next edit "internal5" next edit "internal6" next edit "internal7" next end next end

[leblanda]

It seem that I had a traffic shapping of 100Mbs on the DMZ port

I remove it and now I can go up to 750Mbs!

[aj_]

Is the NAS on the raspberry pi?

The raspberry pi is not gigabit.

[ede_pfau]

Regarding the HW switch, yes, that is the default after factory-reset. The switch is using a hardware chip, not slowing things down like a software switch. But, this is model dependent, other models might or might not have the hardware for it.

[leblanda · Accepted solution]

aj. wrote:

Is the NAS on the raspberry pi?

The raspberry pi is not gigabit.

No the Raspberry PI is only for my sump pump pit monitoring.

My nas is UNRAID on a I5- 4670 intel setup.

The command that I remove that seem to fix the problem are:

config firewall shaper traffic-shaper

edit "fortilink" set guaranteed-bandwidth 100000 next

config firewall shaping-policy edit 1 set service "ALL" set dstintf "dmz" set traffic-shaper "fortilink" set traffic-shaper-reverse "fortilink" set srcaddr "all" set dstaddr "all" next end