mirrors/cheat-sheets
1
0
Fork 0
mirror of https://github.com/yuriskinfo/cheat-sheets.git synced 2025-12-21 21:33:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

ongoing additions, changes, and fixes

Browse Source
This commit is contained in:
Yuri Slobodyanyuk
2021-02-18 10:32:06 +00:00
parent 2cb4a80802
commit bd173189de
1 changed files with 44 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

44
Fortigate-debug-diagnose-complete-cheat-sheet.adoc
View File

@@ -426,3 +426,47 @@ a|View the kernel routing table (FIB). This is the list of resolved routes actua
|Run sniffer on Fortigate to see if devices exchange packets on port 514. Click in GUI on `Test Connectivity` to initiate connection.
|===
== SD-WAN verification and debug
.SD-WAN verification and debug
[cols=2, options="header"]
|===
|Command
|Description
a|*diagnose sys sdwan health-check* (6.4 and newer)
*diagnose sys virtual-link health-check* (5.6 up to 6.4)
| Show state of all the health checks/probes. Successful probes are marked `alive`, failed probes are marked `dead`. Also displays `packet-loss, latency, jitter` for each probe.
a|*diagnose sys sdwan member*
*diagnose sys virtual-wan-link member*
|Show list of SD-WAN zone/interface members. Also gives each interface gateway IP (if was set, 0.0.0.0 if not), `priority`, and `weight` both by default equal `0`, used with some SLA Types.
a|*diagnose sys sdwan service*
*diagnose sys virtual-wan-link service*
|List configured SD-WAN rules (aka `services`), except the Implied one which is always present and cannot be disabled, but is editable for the default load balancing method used. Shows member interfaces and their status `alive|dead` for this rule.
a|*diag sys sdwan intf-sla-log <interface name>*
*diag sys virtual-wan-link intf-sla-log <interface name>*
|Print log of <interface name> usage for the last 10 minutes. The statistics shown in bps: `inbandwidth`, `outbandwidth`, `bibandwidth`, `tx bytes`, `rx bytes`.
|===
|*diag netlink interface clear <interface name>*
|Clear traffic statistics on the interface, this resets statistics of the SD-WAN traffic passing over this interface. Needed, if, for example, you changed SD-WAN rules, but not sure if it's already active. E.g. `diag netlink interface clear port1`.