NP4 IPsec VPN offloading configuration example Hardware accelerated IPsec processing, involving either partial or full offloading, can be achieved in either tunnel or interface mode IPsec configurations. To achieve offloading for both encryption and decryption: In Phase 1 configuration’s Advanced section, Local Gateway IP must be specified as an IP […]
NP4 IPsec VPN offloading NP4 processors improve IPsec tunnel performance by offloading IPsec encryption and decryption. Requirements for hardware accelerated IPsec encryption or decryption are a modification of general offloading requirements. Differing characteristics are: Origin can be local host (the FortiGate unit) In Phase 1 configuration, Local Gateway IP must be […]
Increasing NP4 offloading capacity using link aggregation groups (LAGs) NP4 processors can offload sessions received by interfaces in link aggregation groups (LAGs) (IEEE 802.3ad). A LAG combines more than one physical interface into a group that functions like a single interface with a higher capacity than a single physical interface. […]
Configuring NP4 traffic offloading Offloading traffic to a network processor requires that the FortiGate unit configuration and the traffic itself is suited to hardware acceleration. There are requirements for path the sessions and the individual packets. NP4 session fast path requirements Sessions must be fast path ready. Fast path ready […]
Viewing your FortiGate’s NP4 configuration To list the NP4 network processors on your FortiGate unit, use the following CLI command. get hardware npu np4 list The output lists the interfaces that have NP4 processors. For example, for a FortiGate-5001C: get hardware npu np4 list ID Model Slot Interface 0 On-board […]
NP4 Acceleration NP4 network processors provide fastpath acceleration by offloading communication sessions from the FortiGate CPU. When the first packet of a new session is received by an interface connected to an NP4 processor, just like any session connecting with any FortiGate interface, the session is forwarded to the FortiGate […]
FortiGate–3000D fast path architecture The FortiGate-3000D features 16 front panel SFP+ 10Gb interfaces connected to two NP6 processors through an Integrated Switch Fabirc (ISF). The FortiGate-3000D has the following fastpath architecture: l 8 SFP+ 10Gb interfaces, port1 through port8 share connections to the first NP6 processor (np6_0). l 8 SFP+ […]
FortiGate–1500DT fast path architecture The FortiGate-1500DT features two NP6 processors both connected to an integrated switch fabric. The FortiGate-1500DT has the same hardware configuration as the FortiGate-1500D, but with the addition of newer CPUs and DPDK technology that improves IPS performance. The FortiGate-1500DT includes the following interfaces and NP6 processors: […]
