Improving LAG performance on some FortiGate models

Some FortiGate models support one of the following commands that might improve link aggregation (LAG) performance by reducing the number of dropped packets that can occur with some LAG configurations.

If the command is available, depending on hardware architecture, on some models its available under config system npu:

config system npu

set lag-sw-out-trunk {disable | enable}

end

And on others the following option is available under config system np6:

config system np6

edit np6_0

set lag-npu {disable | enable}

end

If you notice NP6- accelerated LAG interface performance is lower than expected or if you notice excessive dropped packets for sessions over LAG interfaces, you could see if your FortiGate has one of these options in the CLI and if available try enabling it and see if performance improves.

If the option is available for your FortiGate under config system np6, you should enable it for every NP6 processor that is connected to a LAG interface.