config system npu

This command is available for reference model(s) FortiGate 3000D, FortiGate 140E-POE, FortiGate 501E, FortiWiFi 61F. It is not available for FortiGate VM64.

Configure NPU attributes.

config system npu

Description: Configure NPU attributes.

set dedicated-management-cpu [enable|disable]

config port-cpu-map

Description: Configure NPU interface to CPU core mapping.

edit <interface>

set cpu-core {string}

next

end

set fastpath [disable|enable]

set capwap-offload [enable|disable]

set ipsec-enc-subengine-mask {user}

set ipsec-dec-subengine-mask {user}

set sw-np-bandwidth [0G|2G|...]

set strip-esp-padding [enable|disable]

set strip-clear-text-padding [enable|disable]

set ipsec-inbound-cache [enable|disable]

set sse-backpressure [enable|disable]

set rdp-offload [enable|disable]

set ipsec-over-vlink [enable|disable]

set uesp-offload [enable|disable]

set qos-mode [disable|priority|...]

config isf-np-queues

Description: Configure queues of switch port connected to NP6 XAUI on ingress path.

set cos0 {string}

set cos1 {string}

set cos2 {string}

set cos3 {string}

set cos4 {string}

set cos5 {string}

set cos6 {string}

set cos7 {string}

end

set mcast-session-accounting [tpe-based|session-based|...]

set ipsec-mtu-override [disable|enable]

set lag-out-port-select [disable|enable]

set session-denied-offload [disable|enable]

config priority-protocol

Description: Configure NPU priority protocol.

set bgp [enable|disable]

set slbc [enable|disable]

set bfd [enable|disable]

end

end

config system npu

Parameter	Description	Type	Size	Default
dedicated-management-cpu *	Enable to dedicate one CPU for GUI and CLI connections when NPs are busy.	option	-	disable
	Option Description enable Enable dedication of CPU #0 for management tasks. disable Disable dedication of CPU #0 for management tasks.
fastpath *	Enable/disable NP6 offloading (also called fast path).	option	-	enable
	Option Description disable Disable NP6 offloading (fast path). enable Enable NP6 offloading (fast path).
capwap-offload *	Enable/disable offloading managed FortiAP and FortiLink CAPWAP sessions.	option	-	enable
	Option Description enable Enable CAPWAP offload. disable Disable CAPWAP offload.
ipsec-enc-subengine-mask *	IPsec encryption subengine mask .	user	Not Specified
ipsec-dec-subengine-mask *	IPsec decryption subengine mask .	user	Not Specified
sw-np-bandwidth *	Bandwidth from switch to NP.	option	-	0G
	Option Description 0G Default value. No bandwidth control. 2G 2Gbps. 4G 4Gbps. 5G 5Gbps. 6G 6Gbps.
strip-esp-padding *	Enable/disable stripping ESP padding.	option	-	disable
	Option Description enable Enable stripping ESP padding. disable Disable stripping ESP padding.
strip-clear-text-padding *	Enable/disable stripping clear text padding.	option	-	disable
	Option Description enable Enable stripping clear text padding. disable Disable stripping clear text padding.
ipsec-inbound-cache *	Enable/disable IPsec inbound cache for anti-replay.	option	-	enable
	Option Description enable Enable inbound cache always. disable Disable inbound cache when IPsec anti-replay is on.
sse-backpressure *	Enable/disable sse backpressure.	option	-	disable
	Option Description enable Enable sse backpressureg. disable Disable sse backpressureg.
rdp-offload *	Enable/disable rdp offload.	option	-	enable
	Option Description enable Enable reliable datagram protocol traffic offload. disable Disable reliable datagram protocol traffic offload.
ipsec-over-vlink *	Enable/disable IPSEC over vlink.	option	-	disable
	Option Description enable Enable IPSEC over vlink. disable Disable IPSEC over vlink.
uesp-offload *	Enable/disable UDP-encapsulated ESP offload .	option	-	disable
	Option Description enable Enable UDP-encapsulated ESP traffic offload. disable Disable UDP-encapsulated ESP traffic offload.
qos-mode *	QoS mode on switch and NP.	option	-	disable
	Option Description disable Disable QoS on switch and NP. priority Priority based. round-robin Round Robin Scheduler.
mcast-session-accounting *	Enable/disable traffic accounting for each multicast session through TAE counter.	option	-	tpe-based
	Option Description tpe-based Enable TPE-based multicast session accounting. session-based Enable session-based multicast session accounting. disable Disable multicast session accounting.
ipsec-mtu-override *	Enable/disable NP6 IPsec MTU override.	option	-	disable
	Option Description disable Disable NP6 IPsec MTU override. enable Enable NP6 IPsec MTU override.
lag-out-port-select *	Enable/disable LAG outgoing port selection based on incoming traffic port.	option	-	disable
	Option Description disable Disable LAG outgoing trunk in switch. enable Enable LAG outgoing trunk in switch.
session-denied-offload *	Enable/disable offloading of denied sessions. Requires ses-denied-traffic to be set.	option	-	disable
	Option Description disable Disable offloading of denied sessions. enable Enable offloading of denied sessions.

* This parameter may not exist in some models.

config port-cpu-map

Parameter	Description	Type	Size	Default
cpu-core	The CPU core to map to an interface.	string	Maximum length: 31	all

config isf-np-queues

Parameter	Description	Type	Size	Default
cos0	CoS profile name for CoS 0.	string	Maximum length: 35
cos1	CoS profile name for CoS 1.	string	Maximum length: 35
cos2	CoS profile name for CoS 2.	string	Maximum length: 35
cos3	CoS profile name for CoS 3.	string	Maximum length: 35
cos4	CoS profile name for CoS 4.	string	Maximum length: 35
cos5	CoS profile name for CoS 5.	string	Maximum length: 35
cos6	CoS profile name for CoS 6.	string	Maximum length: 35
cos7	CoS profile name for CoS 7.	string	Maximum length: 35

config priority-protocol

Parameter	Description	Type	Size	Default
bgp	Enable/disable NPU BGP priority protocol.	option	-	enable
	Option Description enable Enable NPU BGP priority protocol. disable Disable NPU BGP priority protocol.
slbc	Enable/disable NPU SLBC priority protocol.	option	-	enable
	Option Description enable Enable NPU SLBC priority protocol. disable Disable NPU SLBC priority protocol.
bfd	Enable/disable NPU BFD priority protocol.	option	-	enable
	Option Description enable Enable NPU BFD priority protocol. disable Disable NPU BFD priority protocol.