Fortinet black logo

Hardware Acceleration

FortiGate 1200D fast path architecture

FortiGate 1200D fast path architecture

The FortiGate 1200D features two NP6 processors both connected to an integrated switch fabric.

  • Eight SFP 1Gb interfaces (port1-port8), eight RJ-45 Ethernet ports (port17-24) and two SFP+ 10Gb interfaces (port33 and port34) share connections to the first NP6 processor.
  • Eight SFP 1Gb interfaces (port9-port16), eight RJ-45 Ethernet ports (port25-32) and two SFP+ 10Gb interfaces (port35-port36) share connections to the second NP6 processor.

You can use the following get command to display the FortiGate 1200D NP6 configuration. The command output shows two NP6s named NP6_0 and NP6_1. The output also shows the interfaces (ports) connected to each NP6. You can also use the diagnose npu np6 port-list command to display this information.

get hardware npu np6 port-list 
Chip   XAUI Ports   Max   Cross-chip 
                    Speed offloading 
------ ---- ------- ----- ---------- 
np6_0  0    port33  10G   Yes        
       1    port34  10G   Yes        
       2    port1   1G    Yes        
       2    port3   1G    Yes        
       2    port5   1G    Yes        
       2    port7   1G    Yes        
       2    port17  1G    Yes        
       2    port19  1G    Yes        
       2    port21  1G    Yes        
       2    port23  1G    Yes        
       3    port2   1G    Yes        
       3    port4   1G    Yes        
       3    port6   1G    Yes        
       3    port8   1G    Yes        
       3    port18  1G    Yes        
       3    port20  1G    Yes        
       3    port22  1G    Yes        
       3    port24  1G    Yes        
------ ---- ------- ----- ---------- 
np6_1  0    port35  10G   Yes        
       1    port36  10G   Yes        
       2    port9   1G    Yes        
       2    port11  1G    Yes        
       2    port13  1G    Yes        
       2    port15  1G    Yes        
       2    port25  1G    Yes        
       2    port27  1G    Yes        
       2    port29  1G    Yes        
       2    port31  1G    Yes        
       3    port10  1G    Yes        
       3    port12  1G    Yes        
       3    port14  1G    Yes        
       3    port16  1G    Yes        
       3    port26  1G    Yes        
       3    port28  1G    Yes        
       3    port30  1G    Yes        
       3    port32  1G    Yes        
------ ---- ------- ----- ---------- 

Improving FortiGate 1200D connections per second performance

On the FortiGate 1200D, you can use the following command to potentially improve connections per second (CPS) performance:

config system npu

set np6-cps-optimization-mode {disable | enable}

end

Disabled by default, enabling this option can increase CPS performance by using more CPUs for interrupt processing. If your FortiGate 1200D is processing very large numbers sessions with short life times, you can try enabling this feature to see if performance improves.

FortiGate 1200D fast path architecture

The FortiGate 1200D features two NP6 processors both connected to an integrated switch fabric.

  • Eight SFP 1Gb interfaces (port1-port8), eight RJ-45 Ethernet ports (port17-24) and two SFP+ 10Gb interfaces (port33 and port34) share connections to the first NP6 processor.
  • Eight SFP 1Gb interfaces (port9-port16), eight RJ-45 Ethernet ports (port25-32) and two SFP+ 10Gb interfaces (port35-port36) share connections to the second NP6 processor.

You can use the following get command to display the FortiGate 1200D NP6 configuration. The command output shows two NP6s named NP6_0 and NP6_1. The output also shows the interfaces (ports) connected to each NP6. You can also use the diagnose npu np6 port-list command to display this information.

get hardware npu np6 port-list 
Chip   XAUI Ports   Max   Cross-chip 
                    Speed offloading 
------ ---- ------- ----- ---------- 
np6_0  0    port33  10G   Yes        
       1    port34  10G   Yes        
       2    port1   1G    Yes        
       2    port3   1G    Yes        
       2    port5   1G    Yes        
       2    port7   1G    Yes        
       2    port17  1G    Yes        
       2    port19  1G    Yes        
       2    port21  1G    Yes        
       2    port23  1G    Yes        
       3    port2   1G    Yes        
       3    port4   1G    Yes        
       3    port6   1G    Yes        
       3    port8   1G    Yes        
       3    port18  1G    Yes        
       3    port20  1G    Yes        
       3    port22  1G    Yes        
       3    port24  1G    Yes        
------ ---- ------- ----- ---------- 
np6_1  0    port35  10G   Yes        
       1    port36  10G   Yes        
       2    port9   1G    Yes        
       2    port11  1G    Yes        
       2    port13  1G    Yes        
       2    port15  1G    Yes        
       2    port25  1G    Yes        
       2    port27  1G    Yes        
       2    port29  1G    Yes        
       2    port31  1G    Yes        
       3    port10  1G    Yes        
       3    port12  1G    Yes        
       3    port14  1G    Yes        
       3    port16  1G    Yes        
       3    port26  1G    Yes        
       3    port28  1G    Yes        
       3    port30  1G    Yes        
       3    port32  1G    Yes        
------ ---- ------- ----- ---------- 

Improving FortiGate 1200D connections per second performance

On the FortiGate 1200D, you can use the following command to potentially improve connections per second (CPS) performance:

config system npu

set np6-cps-optimization-mode {disable | enable}

end

Disabled by default, enabling this option can increase CPS performance by using more CPUs for interrupt processing. If your FortiGate 1200D is processing very large numbers sessions with short life times, you can try enabling this feature to see if performance improves.