FortiGate 40F fast path architecture

The FortiGate 40F includes the SOC4 and uses the SOC4 CPU, NP6XLite processor, and CP9XLite processor. The SOC4 includes an integrated switch fabric (ISF) that connects all of the front panel network interfaces to the NP6XLite processor. All data traffic passes from the data interfaces through the ISF to the NP6XLite processor. All supported traffic passing between any two data interfaces can be offloaded by the NP6XLite processor. Data traffic processed by the CPU takes a dedicated data path through the ISF and the NP6XLite processor to the CPU.

The FortiGate 40F features the following front panel interfaces:

• Five 10/100/1000BASE-T Copper (WAN, A, and 1-3) connected to the SOC4. A is a FortiLink interface.

The SOC4 ISF allows you to use the command config system virtual-switch to create a virtual hardware switch that can include any front panel interface connected to the SOC4.

To add an interface to a hardware switch, its mode must be set to static and the interface can't be used in any other configuration. For example, you can't have a firewall policy that references the interface.

You can use the command diagnose npu np6xlite port-list to display the FortiGate 40F NP6XLite configuration.

diagnose npu np6xlite port-list 
Chip   XAUI Ports            Max   Cross-chip 
                             Speed offloading 
------ ---- -------          ----- ---------- 
np6xlite_0
       10   wan              1000M          NO
       5    lan1             1000M          NO
       4    lan2             1000M          NO
       3    lan3             1000M          NO
       2    a                1000M          NO