Fortigate LAN port disable / Enable via CLI

用 CLI指令將port3 disable / enable.

1. Disable LAN port3
config system interface
    edit "port3"
        set status down
    next
end

2. Enable LAN port3
config system interface
    edit "port3"
        set status up
    next
end

3. 查詢 port3 狀態
diagnose hardware deviceinfo nic port3

Proxmox host and VM network disconnect

Reference: 

https://forum.proxmox.com/threads/fixed-intermittent-network-dropout-with-intel-i218-lm-nic-e1000e-hardware-offloading-bug.182062

 

狀況：

虛擬機啟用docker container不會卡住。
在防火牆設定外部port 443對應到虛擬機的port 443，過幾分鐘實體主機和虛擬機的網路會卡住。
把防火牆port 443對應關閉，重新插拔網路線，實體主機和虛擬機的網路會恢復。 

 

原因：

網路卡e1000e Linux kernel driver bug. 

在 kernel 會看到這樣的錯誤 e1000e 0000:00:19.0 nic0: Detected Hardware Unit Hang 

 

解法：

Step 1 -- Identify your physical NIC name
lspci | grep -i ethernet
ip link show

Note the interface that is the bridge port for vmbr0.

Step 2 -- Check offloading is currently enabled (confirms the issue applies to you)
ethtool -k nic0 | grep -E 'tcp-seg|generic-seg|generic-receive|rx-vlan|tx-vlan|scatter'

If any entries show on, proceed.

Step 3 -- Disable offloading immediately (temporary, to test)
Replace nic0 with your interface name:

ethtool -K nic0 gso off tso off rxvlan off txvlan off gro off tx off rx off sg off

Step 4 -- Make it permanent
Edit /etc/network/interfaces:
nano /etc/network/interfaces
iface nic0 inet manual
    post-up ethtool -K nic0 gso off tso off rxvlan off txvlan off gro off tx off rx off sg off