diagnose npu np6 npu-feature (verify enabled NP6 features)
You can use the diagnose npu np6 npu-feature
command to see the NP6 features that are enabled on your FortiGate and those that are not.
The following command output, from a FortiGate 1500D, shows the default NP6 configuration for most FortiGates with NP6 processors:
diagnose npu np6 npu-feature np_0 np_1 ------------------- --------- --------- Fastpath Enabled Enabled HPE-type-shaping Disabled Disabled Standalone No No IPv4 firewall Yes Yes IPv6 firewall Yes Yes IPv4 IPSec Yes Yes IPv6 IPSec Yes Yes IPv4 tunnel Yes Yes IPv6 tunnel Yes Yes GRE tunnel No No GRE passthrough Yes Yes IPv4 Multicast Yes Yes IPv6 Multicast Yes Yes CAPWAP Yes Yes RDP Offload Yes Yes
If you use the following command to disable fastpath:
config system npu
set fastpath disable
end
The npu-feature
command output shows this configuration change:
diagnose npu np6 npu-feature np_0 np_1 ------------------- --------- --------- Fastpath Disabled Disabled HPE-type-shaping Disabled Disabled Standalone No No IPv4 firewall Yes Yes IPv6 firewall Yes Yes IPv4 IPSec Yes Yes IPv6 IPSec Yes Yes IPv4 tunnel Yes Yes IPv6 tunnel Yes Yes GRE tunnel No No GRE passthrough Yes Yes IPv4 Multicast Yes Yes IPv6 Multicast Yes Yes CAPWAP Yes Yes RDP Offload Yes Yes