Disable automatic ASIC offloading
When auto-asic-offload is set to disable in the firewall policy, traffic is nt offloaded and the NPU hosting counter is ticked.
# diagnose vpn ipsec status All ipsec crypto devices in use:
NP6_0:
Encryption (encrypted/decrypted)
| null | |
| des 0 | 1. |
| 3des : 0 | 1. |
| aes : 0 | 1. |
| aes-gcm : 0 | 1. |
| aria : 0 | 1. |
| seed : 0 | 1. |
| chacha20poly1305 : 0
Integrity (generated/validated) |
1. |
| null : 0 | 1. |
| md5 : 0 | 1. |
| sha1 : 0 | 1. |
| sha256 : 0 | 1. |
| sha384 : 0 | 1. |
| sha512 : 0
NP6_1: Encryption (encrypted/decrypted) |
1. |
| null : 14976 | 15357 |
| des : 0 | 1. |
| 3des : 0 | 1. |
| aes : 110080 | 2175 |
| aes-gcm : 0 | 1. |
| aria : 0 | 1. |
| seed : 0 | 1. |
| chacha20poly1305 : 0
Integrity (generated/validated) |
1. |
| null : 0 | 1. |
| md5 : 110080 | 2175 |
| sha1 : 14976 | 15357 |
| sha256 : 0 | 1. |
| sha384 : 0 | 1. |
| sha512 : 0
NPU Host Offloading: Encryption (encrypted/decrypted) |
1. |
| null : 3 | 1. |
| des : 0 | 1. |
| 3des : 0 | 1. |
| aes : 111090 | 1. |
| aes-gcm : 0 | 1. |
| aria : 0 | 1. |
| seed : 0 | 1. |
| chacha20poly1305 : 0
Integrity (generated/validated) |
1. |
| null : 0 | 1. |
| md5 : 111090 | 1. |
| sha1 : 3 | 1. |
| sha256 : 0 | 1. |
| sha384 : 0 | 1. |
| sha512 : 0
CP8: Encryption (encrypted/decrypted) |
1. |
| null : 1 | 1. |
| des : 0 | 1. |
Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!