Fortinet black logo

CLI Reference

system npu

Configure NPU attributes.

  config system npu
      Description: Configure NPU attributes.
      set dedicated-management-cpu [enable|disable]
      config port-cpu-map
          Description: Configure NPU interface to CPU core mapping.
          edit <interface>
              set cpu-core {string}
          next
      end
      set fastpath [disable|enable]
      set capwap-offload [enable|disable]
      set ipsec-enc-subengine-mask {user}
      set ipsec-dec-subengine-mask {user}
      set sw-np-bandwidth [0G|2G|...]
      set strip-esp-padding [enable|disable]
      set strip-clear-text-padding [enable|disable]
      set ipsec-inbound-cache [enable|disable]
      set sse-backpressure [enable|disable]
      set rdp-offload [enable|disable]
      set ipsec-over-vlink [enable|disable]
      set qos-mode [disable|priority|...]
      config isf-np-queues
          Description: Configure queues of switch port connected to NP6 XAUI on ingress path.
          set cos0 {string}
          set cos1 {string}
          set cos2 {string}
          set cos3 {string}
          set cos4 {string}
          set cos5 {string}
          set cos6 {string}
          set cos7 {string}
      end
      set recover-np6-link [enable|disable]
      config priority-protocol
          Description: Configure NPU priority protocol.
          set bgp [enable|disable]
          set slbc [enable|disable]
          set bfd [enable|disable]
      end
  end

config system npu

Parameter Name Description Type Size
dedicated-management-cpu Enable to dedicate one CPU for GUI and CLI connections when NPs are busy.
enable: Enable dedication of CPU #0 for management tasks.
disable: Disable dedication of CPU #0 for management tasks.
option -
fastpath Enable/disable NP6 offloading (also called fast path).
disable: Disable NP6 offloading (fast path).
enable: Enable NP6 offloading (fast path).
option -
capwap-offload Enable/disable offloading managed FortiAP and FortiLink CAPWAP sessions.
enable: Enable CAPWAP offload.
disable: Disable CAPWAP offload.
option -
ipsec-enc-subengine-mask IPsec encryption subengine mask (0x1 - 0xff, default 0xff). user Not Specified
ipsec-dec-subengine-mask IPsec decryption subengine mask (0x1 - 0xff, default 0xff). user Not Specified
sw-np-bandwidth Bandwidth from switch to NP.
0G: Default value. No bandwidth control.
2G: 2Gbps.
4G: 4Gbps.
5G: 5Gbps.
6G: 6Gbps.
option -
strip-esp-padding Enable/disable stripping ESP padding.
enable: Enable stripping ESP padding.
disable: Disable stripping ESP padding.
option -
strip-clear-text-padding Enable/disable stripping clear text padding.
enable: Enable stripping clear text padding.
disable: Disable stripping clear text padding.
option -
ipsec-inbound-cache Enable/disable IPsec inbound cache for anti-replay.
enable: Enable inbound cache always.
disable: Disable inbound cache when IPsec anti-replay is on.
option -
sse-backpressure Enable/disable sse backpressure.
enable: Enable sse backpressureg.
disable: Disable sse backpressureg.
option -
rdp-offload Enable/disable rdp offload.
enable: Enable reliable datagram protocol traffic offload.
disable: Disable reliable datagram protocol traffic offload.
option -
ipsec-over-vlink Enable/disable IPSEC over vlink.
enable: Enable IPSEC over vlink.
disable: Disable IPSEC over vlink.
option -
qos-mode QoS mode on switch and NP.
disable: Disable QoS on switch and NP.
priority: Priority based.
round-robin: Round Robin Sheduler.
option -
recover-np6-link Enable/disable internal link failure check and recovery after boot up.
enable: Enable internal link failure check and recovery after boot up.
disable: Disable internal link failure check and recovery after boot up.
option -
Parameter Name Description Type Size
cpu-core The CPU core to map to an interface. string Maximum length: 31
Parameter Name Description Type Size
cos0 CoS profile name for CoS 0. string Maximum length: 35
cos1 CoS profile name for CoS 1. string Maximum length: 35
cos2 CoS profile name for CoS 2. string Maximum length: 35
cos3 CoS profile name for CoS 3. string Maximum length: 35
cos4 CoS profile name for CoS 4. string Maximum length: 35
cos5 CoS profile name for CoS 5. string Maximum length: 35
cos6 CoS profile name for CoS 6. string Maximum length: 35
cos7 CoS profile name for CoS 7. string Maximum length: 35
Parameter Name Description Type Size
bgp Enable/disable NPU BGP priority protocol.
enable: Enable NPU BGP priority protocol.
disable: Disable NPU BGP priority protocol.
option -
slbc Enable/disable NPU SLBC priority protocol.
enable: Enable NPU SLBC priority protocol.
disable: Disable NPU SLBC priority protocol.
option -
bfd Enable/disable NPU BFD priority protocol.
enable: Enable NPU BFD priority protocol.
disable: Disable NPU BFD priority protocol.
option -

Configure NPU attributes.

  config system npu
      Description: Configure NPU attributes.
      set dedicated-management-cpu [enable|disable]
      config port-cpu-map
          Description: Configure NPU interface to CPU core mapping.
          edit <interface>
              set cpu-core {string}
          next
      end
      set fastpath [disable|enable]
      set capwap-offload [enable|disable]
      set ipsec-enc-subengine-mask {user}
      set ipsec-dec-subengine-mask {user}
      set sw-np-bandwidth [0G|2G|...]
      set strip-esp-padding [enable|disable]
      set strip-clear-text-padding [enable|disable]
      set ipsec-inbound-cache [enable|disable]
      set sse-backpressure [enable|disable]
      set rdp-offload [enable|disable]
      set ipsec-over-vlink [enable|disable]
      set qos-mode [disable|priority|...]
      config isf-np-queues
          Description: Configure queues of switch port connected to NP6 XAUI on ingress path.
          set cos0 {string}
          set cos1 {string}
          set cos2 {string}
          set cos3 {string}
          set cos4 {string}
          set cos5 {string}
          set cos6 {string}
          set cos7 {string}
      end
      set recover-np6-link [enable|disable]
      config priority-protocol
          Description: Configure NPU priority protocol.
          set bgp [enable|disable]
          set slbc [enable|disable]
          set bfd [enable|disable]
      end
  end

config system npu

Parameter Name Description Type Size
dedicated-management-cpu Enable to dedicate one CPU for GUI and CLI connections when NPs are busy.
enable: Enable dedication of CPU #0 for management tasks.
disable: Disable dedication of CPU #0 for management tasks.
option -
fastpath Enable/disable NP6 offloading (also called fast path).
disable: Disable NP6 offloading (fast path).
enable: Enable NP6 offloading (fast path).
option -
capwap-offload Enable/disable offloading managed FortiAP and FortiLink CAPWAP sessions.
enable: Enable CAPWAP offload.
disable: Disable CAPWAP offload.
option -
ipsec-enc-subengine-mask IPsec encryption subengine mask (0x1 - 0xff, default 0xff). user Not Specified
ipsec-dec-subengine-mask IPsec decryption subengine mask (0x1 - 0xff, default 0xff). user Not Specified
sw-np-bandwidth Bandwidth from switch to NP.
0G: Default value. No bandwidth control.
2G: 2Gbps.
4G: 4Gbps.
5G: 5Gbps.
6G: 6Gbps.
option -
strip-esp-padding Enable/disable stripping ESP padding.
enable: Enable stripping ESP padding.
disable: Disable stripping ESP padding.
option -
strip-clear-text-padding Enable/disable stripping clear text padding.
enable: Enable stripping clear text padding.
disable: Disable stripping clear text padding.
option -
ipsec-inbound-cache Enable/disable IPsec inbound cache for anti-replay.
enable: Enable inbound cache always.
disable: Disable inbound cache when IPsec anti-replay is on.
option -
sse-backpressure Enable/disable sse backpressure.
enable: Enable sse backpressureg.
disable: Disable sse backpressureg.
option -
rdp-offload Enable/disable rdp offload.
enable: Enable reliable datagram protocol traffic offload.
disable: Disable reliable datagram protocol traffic offload.
option -
ipsec-over-vlink Enable/disable IPSEC over vlink.
enable: Enable IPSEC over vlink.
disable: Disable IPSEC over vlink.
option -
qos-mode QoS mode on switch and NP.
disable: Disable QoS on switch and NP.
priority: Priority based.
round-robin: Round Robin Sheduler.
option -
recover-np6-link Enable/disable internal link failure check and recovery after boot up.
enable: Enable internal link failure check and recovery after boot up.
disable: Disable internal link failure check and recovery after boot up.
option -
Parameter Name Description Type Size
cpu-core The CPU core to map to an interface. string Maximum length: 31
Parameter Name Description Type Size
cos0 CoS profile name for CoS 0. string Maximum length: 35
cos1 CoS profile name for CoS 1. string Maximum length: 35
cos2 CoS profile name for CoS 2. string Maximum length: 35
cos3 CoS profile name for CoS 3. string Maximum length: 35
cos4 CoS profile name for CoS 4. string Maximum length: 35
cos5 CoS profile name for CoS 5. string Maximum length: 35
cos6 CoS profile name for CoS 6. string Maximum length: 35
cos7 CoS profile name for CoS 7. string Maximum length: 35
Parameter Name Description Type Size
bgp Enable/disable NPU BGP priority protocol.
enable: Enable NPU BGP priority protocol.
disable: Disable NPU BGP priority protocol.
option -
slbc Enable/disable NPU SLBC priority protocol.
enable: Enable NPU SLBC priority protocol.
disable: Disable NPU SLBC priority protocol.
option -
bfd Enable/disable NPU BFD priority protocol.
enable: Enable NPU BFD priority protocol.
disable: Disable NPU BFD priority protocol.
option -