config port-path-option

If your FortiGate is licensed for hyperscale firewall features, you can use the following command to select interfaces to use for hardware logging and HA hardware session synchronization:

config system npu

config port-path-option

set ports-using-npu {ha1 ha2 aux1 aux2}

end

Changing the port-path-option configuration restarts the FortiGate, temporarily interrupting traffic. If you have two FortiGates in an FGCP HA cluster, you should remove the backup FortiGate from the cluster, change the port-path-option configuration on both FortiGates, and then after they restart, add the backup FortiGate back to the cluster.

For more information about hardware logging, see Optimizing hardware logging performance using AUX interfaces. For more information about HA hardware session synchronization, see Optimizing HA hardware session synchronization performance.