FortiGate 400E and 401E fast path architecture

The FortiGate 400E and 401E models feature the following front panel interfaces:

• Two 10/100/1000BASE-T Copper (MGMT and HA, not connected to the NP6 processor)
• Sixteen 10/100/1000BASE-T Copper (1 to 16)
• Sixteen 1 GigE SFP (17 - 28, S1, S2, VW1, VW2) (S1 and S2 are configured as sniffer interfaces, VW1 and VW2 are configured as virtual wire interfaces)

The following diagram also shows the XAUI and QSGMII port connections between the NP6 processor and the integrated switch fabric.

The FortiGate 400E and 401E each include one NP6 processor. All supported traffic passing between any two data interfaces can be offloaded by the NP6 processor. Data traffic to be processed by the CPU takes a dedicated data path through the NP6 processor to the CPU. Interfaces 1 to 16 connect to an integrated switch fabric to allow these sixteen interfaces to share two XAUI ports that connect to the NP6 processor.

The MGMT interface is not connected to the NP6 processor. Management traffic passes to the CPU over a dedicated management path that is separate from the data path. The HA interface is also not connected to the NP6 processors. To help provide better HA stability and resiliency, HA traffic uses a dedicated physical control path that provides HA control traffic separation from data traffic processing. The separation of management and HA traffic from data traffic keeps management and HA traffic from affecting the stability and performance of data traffic processing.

You can use the following get command to display the FortiGate 400E or 401E NP6 configuration. You can also use the diagnose npu np6 port-list command to display this information.

get hardware npu np6 port-list 
Chip   XAUI Ports        Max  Cross-chip 
                        Speed offloading 
------ ---- -------     ----- ---------- 
np6_0   0   port1        1G   Yes 
        0   port2        1G   Yes 
        0   port3        1G   Yes 
        0   port4        1G   Yes 
        0   port5        1G   Yes 
        0   port6        1G   Yes 
        0   port7        1G   Yes 
        0   port8        1G   Yes 
        1   port9        1G   Yes 
        1   port10       1G   Yes 
        1   port11       1G   Yes 
        1   port12       1G   Yes 
        1   port13       1G   Yes 
        1   port14       1G   Yes 
        1   port15       1G   Yes 
        1   port16       1G   Yes 
        2   port17       1G   Yes 
        2   port18       1G   Yes 
        2   port19       1G   Yes 
        2   port20       1G   Yes 
        2   port21       1G   Yes 
        2   port22       1G   Yes 
        2   port23       1G   Yes 
        2   port2        1G   Yes 
        3   port25       1G   Yes 
        3   port26       1G   Yes 
        3   port27       1G   Yes 
        3   port28       1G   Yes 
        3   s1           1G   Yes
        3   s2           1G   Yes 
        3   vw1          1G   Yes 
        3   vw2          1G   Yes 
------ ---- ------- ----- ----------