FortiGate-4800F and 4801F - assigning NP7 processor groups

When adding a hyperscale firewall VDOM to a FortiGate-4800F or 4801F, in addition to enabling full-offload for the hyperscale firewall VDOM, you also need to assign an NP7 processor group:

config system settings

set policy-offload-level full-offload

set npu-group-id {0 | 1 | 2 | 3}

end

You need to assign the NP7 processor group before adding any interfaces to the hyperscale firewall VDOM. Assigning an NP7 processor group is required because of the NP7 configuration of the FortiGate-4800F and 4801F. For more information, see Assigning an NP7 processor group to a hyperscale firewall VDOM.