FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
jsarah
Staff
Staff
Article Id 343337
Description This article describes how to perform debugging to see if a link monitor is occurring in FortiGate.
Scope FortiGate.
Description

In troubleshooting scenario to see if FortiGate is performing link monitor and its status. 

Perform the following commands:

 

diagnose debug reset

diagnose debug application link-monitor -1

diagnose debug enable

 

Following is the sample output:

 

iron-kvm02 # lnkmtd::ping_do_addr_up(136): ---> google-4-VIRTUAL_WAN_LINK-4->8.8.8.8(8.8.8.8), rcvd
lnkmtd::monitor_peer_recv(2128): ---> google-4-VIRTUAL_WAN_LINK-4 send time 1727070826s 793684us, revd time 1727070826s 809536us
lnkmtd::monitor_ppeer_fail(1803): ---> google-3-VIRTUAL_WAN_LINK-3(8.8.8.8 ping) is dead.
lnkmtd::ping_send_msg(432): ---> ping 8.8.8.8 seq_no=667, icmp id=267, send 20 bytes
lnkmtd::monitor_proto_peer_send_request(625): ---> google-3-VIRTUAL_WAN_LINK-3(8.8.8.8:ping) send probe packet, fail count(0)
lnkmtd::ping_send_msg(432): ---> ping 8.8.8.8 seq_no=667, icmp id=1, send 20 bytes
lnkmtd::monitor_proto_peer_send_request(625): ---> google-4-VIRTUAL_WAN_LINK-4(8.8.8.8:ping) send probe packet, fail count(0)
lnkmtd::monitor_ppeer_fail(1803): ---> google-5-VIRTUAL_WAN_LINK-5(8.8.8.8 ping) is dead.
lnkmtd::ping_send_msg(432): ---> ping 8.8.8.8 seq_no=667, icmp id=268, send 20 bytes
lnkmtd::monitor_proto_peer_send_request(625): ---> google-5-VIRTUAL_WAN_LINK-5(8.8.8.8:ping) send probe packet, fail count(0)
lnkmtd::ping_do_addr_up(136): ---> google-4-VIRTUAL_WAN_LINK-4->8.8.8.8(8.8.8.8), rcvd
lnkmtd::monitor_peer_recv(2128): ---> google-4-VIRTUAL_WAN_LINK-4 send time 1727070827s 306708us, revd time 1727070827s 333986us
lnkmtd::ping_send_msg(432): ---> ping 8.8.8.8 seq_no=668, icmp id=267, send 20 bytes
lnkmtd::monitor_proto_peer_send_request(625): ---> google-3-VIRTUAL_WAN_LINK-3(8.8.8.8:ping) send probe packet, fail count(1)
lnkmtd::ping_send_msg(432): ---> ping 8.8.8.8 seq_no=668, icmp id=1, send 20 bytes
lnkmtd::monitor_proto_peer_send_request(625): ---> google-4-VIRTUAL_WAN_LINK-4(8.8.8.8:ping) send probe packet, fail count(0)
lnkmtd::ping_send_msg(432): ---> ping 8.8.8.8 seq_no=668, icmp id=268, send 20 bytes
lnkmtd::monitor_proto_peer_send_request(625): ---> google-5-VIRTUAL_WAN_LINK-5(8.8.8.8:ping) send probe packet, fail count(1)
lnkmtd::ping_do_addr_up(136): ---> google-4-VIRTUAL_WAN_LINK-4->8.8.8.8(8.8.8.8), rcvd

 

diagnose debug disable --> To stop debug.

 

Explanation:

Here it is possible to see ping from 'google-4-VIRTUAL_WAN_LINK-4' is a success and all others failed.

 

The health check configured is towards 8.8.8.8.