Fortinet white logo
Fortinet white logo

CLI Reference

config firewall shaper per-ip-shaper

config firewall shaper per-ip-shaper

Configure per-IP traffic shaper.

config firewall shaper per-ip-shaper
    Description: Configure per-IP traffic shaper.
    edit <name>
        set bandwidth-unit [kbps|mbps|...]
        set diffserv-forward [enable|disable]
        set diffserv-reverse [enable|disable]
        set diffservcode-forward {user}
        set diffservcode-rev {user}
        set fabric-force-sync [enable|disable]
        set fabric-object [enable|disable]
        set fabric-object-source [member|local|...]
        set max-bandwidth {integer}
        set max-concurrent-session {integer}
        set max-concurrent-tcp-session {integer}
        set max-concurrent-udp-session {integer}
        set uuid {uuid}
    next
end

config firewall shaper per-ip-shaper

Parameter

Description

Type

Size

Default

bandwidth-unit

Unit of measurement for maximum bandwidth for this shaper (Kbps, Mbps or Gbps).

option

-

kbps

Option

Description

kbps

Kilobits per second.

mbps

Megabits per second.

gbps

Gigabits per second.

diffserv-forward

Enable/disable changing the Forward (original) DiffServ setting applied to traffic accepted by this shaper.

option

-

disable

Option

Description

enable

Enable setting forward (original) traffic DiffServ.

disable

Disable setting forward (original) traffic DiffServ.

diffserv-reverse

Enable/disable changing the Reverse (reply) DiffServ setting applied to traffic accepted by this shaper.

option

-

disable

Option

Description

enable

Enable setting reverse (reply) traffic DiffServ.

disable

Disable setting reverse (reply) traffic DiffServ.

diffservcode-forward

Forward (original) DiffServ setting to be applied to traffic accepted by this shaper.

user

Not Specified

diffservcode-rev

Reverse (reply) DiffServ setting to be applied to traffic accepted by this shaper.

user

Not Specified

fabric-force-sync *

Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped.

option

-

disable

Option

Description

enable

Enable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

disable

Disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

fabric-object *

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

fabric-object-source *

Source of truth for fabric object.

option

-

root

Option

Description

member

Source of truth for this object is a non-root member of fabric.

local

Source of truth for this object is this security fabric member.

root

Source of truth for this object is the root of the fabric.

max-bandwidth

Upper bandwidth limit enforced by this shaper (0 - 80000000). 0 means no limit. Units depend on the bandwidth-unit setting.

integer

Minimum value: 0 Maximum value: 80000000 **

0

max-concurrent-session

Maximum number of concurrent sessions allowed by this shaper (0 - 2097000). 0 means no limit.

integer

Minimum value: 0 Maximum value: 2097000

0

max-concurrent-tcp-session

Maximum number of concurrent TCP sessions allowed by this shaper (0 - 2097000). 0 means no limit.

integer

Minimum value: 0 Maximum value: 2097000

0

max-concurrent-udp-session

Maximum number of concurrent UDP sessions allowed by this shaper (0 - 2097000). 0 means no limit.

integer

Minimum value: 0 Maximum value: 2097000

0

name

Traffic shaper name.

string

Maximum length: 35

uuid *

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.

** Values may differ between models.

config firewall shaper per-ip-shaper

config firewall shaper per-ip-shaper

Configure per-IP traffic shaper.

config firewall shaper per-ip-shaper
    Description: Configure per-IP traffic shaper.
    edit <name>
        set bandwidth-unit [kbps|mbps|...]
        set diffserv-forward [enable|disable]
        set diffserv-reverse [enable|disable]
        set diffservcode-forward {user}
        set diffservcode-rev {user}
        set fabric-force-sync [enable|disable]
        set fabric-object [enable|disable]
        set fabric-object-source [member|local|...]
        set max-bandwidth {integer}
        set max-concurrent-session {integer}
        set max-concurrent-tcp-session {integer}
        set max-concurrent-udp-session {integer}
        set uuid {uuid}
    next
end

config firewall shaper per-ip-shaper

Parameter

Description

Type

Size

Default

bandwidth-unit

Unit of measurement for maximum bandwidth for this shaper (Kbps, Mbps or Gbps).

option

-

kbps

Option

Description

kbps

Kilobits per second.

mbps

Megabits per second.

gbps

Gigabits per second.

diffserv-forward

Enable/disable changing the Forward (original) DiffServ setting applied to traffic accepted by this shaper.

option

-

disable

Option

Description

enable

Enable setting forward (original) traffic DiffServ.

disable

Disable setting forward (original) traffic DiffServ.

diffserv-reverse

Enable/disable changing the Reverse (reply) DiffServ setting applied to traffic accepted by this shaper.

option

-

disable

Option

Description

enable

Enable setting reverse (reply) traffic DiffServ.

disable

Disable setting reverse (reply) traffic DiffServ.

diffservcode-forward

Forward (original) DiffServ setting to be applied to traffic accepted by this shaper.

user

Not Specified

diffservcode-rev

Reverse (reply) DiffServ setting to be applied to traffic accepted by this shaper.

user

Not Specified

fabric-force-sync *

Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped.

option

-

disable

Option

Description

enable

Enable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

disable

Disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

fabric-object *

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

fabric-object-source *

Source of truth for fabric object.

option

-

root

Option

Description

member

Source of truth for this object is a non-root member of fabric.

local

Source of truth for this object is this security fabric member.

root

Source of truth for this object is the root of the fabric.

max-bandwidth

Upper bandwidth limit enforced by this shaper (0 - 80000000). 0 means no limit. Units depend on the bandwidth-unit setting.

integer

Minimum value: 0 Maximum value: 80000000 **

0

max-concurrent-session

Maximum number of concurrent sessions allowed by this shaper (0 - 2097000). 0 means no limit.

integer

Minimum value: 0 Maximum value: 2097000

0

max-concurrent-tcp-session

Maximum number of concurrent TCP sessions allowed by this shaper (0 - 2097000). 0 means no limit.

integer

Minimum value: 0 Maximum value: 2097000

0

max-concurrent-udp-session

Maximum number of concurrent UDP sessions allowed by this shaper (0 - 2097000). 0 means no limit.

integer

Minimum value: 0 Maximum value: 2097000

0

name

Traffic shaper name.

string

Maximum length: 35

uuid *

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.

** Values may differ between models.