Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Hardware Acceleration

FortiGate-5001E and 5001E1 fast path architecture

The FortiGate 5001E and 5001E1 models feature the following interfaces:

  • Two 10/100/1000BASE-T Copper (MGMT1 and MGMT2) (not connected to the NP6 processors)
  • Two 40 GigE QSFP+ Fabric Channel (1 and 2)
  • Two 10 GigE SFP+ Fabric Channel (3 and 4)
  • Two base backplane 1Gbps interfaces (base1 and base2) for HA heartbeat communications across the FortiGate-5000 chassis base backplane.

  • Five fabric backplane 40Gbps interfaces (fabric1 to fabric5) for data communications across the FortiGate-5000 chassis fabric backplane

You can use the following get command to display the FortiGate-5001E NP6 configuration. The command output shows both NP6s connected to each interface with cross-chip offloading supported for all interfaces connected to the NP6 processors. You can also use the diagnose npu np6 port-list command to display this information.

get hardware npu np6 port-list 
Chip                  XAUI Ports   Max     Cross-chip 
                                   Speed   offloading 
--------------------  ---- ------  ------- ---------- 
NP#0-1                0-3  port1   40000M  Yes        
NP#0-1                0-3  port2   40000M  Yes        
NP#0-1                0-3  port3   10000M  Yes        
NP#0-1                0-3  port4   10000M  Yes        
NP#0-1                0-3  base1   1000M   Yes        
NP#0-1                0-3  base2   1000M   Yes        
NP#0-1                0-3  fabric1 40000M  Yes        
NP#0-1                0-3  fabric2 40000M  Yes        
NP#0-1                0-3  fabric3 40000M  Yes        
NP#0-1                0-3  fabric4 40000M  Yes        
NP#0-1                0-3  fabric5 40000M  Yes        
--------------------  ---- ------  ------- ---------- 

Distributing traffic evenly among the NP6 processors can optimize performance. For details, see Optimizing NP6 performance by distributing traffic to XAUI links.

You can also add LAGs to improve performance. For details, see Increasing NP6 offloading capacity using link aggregation groups (LAGs).

If the FortiGate-5001E or 5001E1 is operating as part of an SLBC system, the output of the get hardware npu np6 port-list command shows links to FortiController front panel interfaces, FortiController trunk interfaces, and to the NP6 processors in other FortiGate-5001Es or 5001E1s in the chassis:

get hardware npu np6 port-list
Chip                  XAUI Ports    Max     Cross-chip 
			                        Speed   offloading 
--------------------  ---- ------   ------- ----------
NP#0-1                0-3  port1    40000M  Yes
NP#0-1                0-3  port2    40000M  Yes
NP#0-1                0-3  port3    10000M  Yes
NP#0-1                0-3  port4    10000M  Yes
NP#0-1                0-3  base1    1000M   Yes
NP#0-1                0-3  base2    1000M   Yes
NP#0-1                0-3  elbc-ctrl/1 40000M Yes
NP#0-1                0-3  elbc-ctrl/2 40000M Yes
NP#0-1                0-3  np6_0_8  40000M  Yes
NP#0-1                0-3  np6_0_9  40000M  Yes
NP#0-1                0-3  np6_0_10 40000M  Yes
NP#0-1                0-3  np6_0_17 40000M  Yes
NP#0-1                0-3  np6_0_18 40000M  Yes
NP#0-1                0-3  np6_0_19 40000M  Yes
NP#0-1                0-3  np6_0_20 40000M  Yes
NP#0-1                0-3  np6_0_21 40000M  Yes
NP#0-1                0-3  np6_0_22 40000M  Yes
NP#0-1                0-3  np6_0_23 40000M  Yes
NP#0-1                0-3  np6_0_24 40000M  Yes
NP#0-1                0-3  fctrl1/trunk01 40000M Yes
NP#0-1                0-3  fctrl2/trunk01 40000M Yes
NP#0-1                0-3  np6_0_27 40000M  Yes
NP#0-1                0-3  np6_0_28 40000M  Yes
NP#0-1                0-3  np6_0_29 40000M  Yes
NP#0-1                0-3  np6_0_30 40000M  Yes
NP#0-1                0-3  np6_0_31 40000M  Yes
NP#0-1                0-3  np6_0_32 40000M  Yes
NP#0-1                0-3  fctrl1/f1-1 10000M Yes
NP#0-1                0-3  fctrl2/f1-1 10000M Yes
NP#0-1                0-3  fctrl1/f1-2 10000M Yes
NP#0-1                0-3  fctrl2/f1-2 10000M Yes
NP#0-1                0-3  fctrl1/f1-3 10000M Yes
NP#0-1                0-3  fctrl2/f1-3 10000M Yes
NP#0-1                0-3  fctrl1/f1-4 10000M Yes
NP#0-1                0-3  fctrl2/f1-4 10000M Yes
NP#0-1                0-3  fctrl1/f1-5 10000M Yes
NP#0-1                0-3  fctrl2/f1-5 10000M Yes
NP#0-1                0-3  fctrl1/f1-6 10000M Yes
NP#0-1                0-3  fctrl2/f1-6 10000M Yes
NP#0-1                0-3  fctrl1/f1-7 10000M Yes
NP#0-1                0-3  fctrl2/f1-7 10000M Yes
NP#0-1                0-3  fctrl1/f1-8 10000M Yes
NP#0-1                0-3  fctrl2/f1-8 10000M Yes
NP#0-1                0-3  fctrl1/f1-9 10000M Yes
NP#0-1                0-3  fctrl2/f1-9 10000M Yes
NP#0-1                0-3  fctrl1/f1-10 10000M Yes
NP#0-1                0-3  fctrl2/f1-10 10000M Yes
NP#0-1                0-3  fctrl1/f2-1 10000M Yes
NP#0-1                0-3  fctrl2/f2-1 10000M Yes
NP#0-1                0-3  fctrl1/f2-2 10000M Yes
NP#0-1                0-3  fctrl2/f2-2 10000M Yes
NP#0-1                0-3  fctrl1/f2-3 10000M Yes
NP#0-1                0-3  fctrl2/f2-3 10000M Yes
NP#0-1                0-3  fctrl1/f2-4 10000M Yes
NP#0-1                0-3  fctrl2/f2-4 10000M Yes
NP#0-1                0-3  fctrl1/f2-5 10000M Yes
NP#0-1                0-3  fctrl2/f2-5 10000M Yes
NP#0-1                0-3  fctrl1/f2-6 10000M Yes
NP#0-1                0-3  fctrl2/f2-6 10000M Yes
NP#0-1                0-3  fctrl1/f2-7 10000M Yes
NP#0-1                0-3  fctrl2/f2-7 10000M Yes
NP#0-1                0-3  fctrl1/f2-8 10000M Yes
NP#0-1                0-3  fctrl2/f2-8 10000M Yes
NP#0-1                0-3  fctrl1/f2-9 10000M Yes
NP#0-1                0-3  fctrl2/f2-9 10000M Yes
NP#0-1                0-3  fctrl1/f2-10 10000M Yes
NP#0-1                0-3  fctrl2/f2-10 10000M Yes
--------------------  ---- ------ ------- ----------

Splitting front panel interfaces

You can use the following CLI command to split the port1 and port2 front panel interfaces into four interfaces.

config system global

set split-port {port1 port2}

end

FortiGate-5001E and 5001E1 fast path architecture

The FortiGate 5001E and 5001E1 models feature the following interfaces:

  • Two 10/100/1000BASE-T Copper (MGMT1 and MGMT2) (not connected to the NP6 processors)
  • Two 40 GigE QSFP+ Fabric Channel (1 and 2)
  • Two 10 GigE SFP+ Fabric Channel (3 and 4)
  • Two base backplane 1Gbps interfaces (base1 and base2) for HA heartbeat communications across the FortiGate-5000 chassis base backplane.

  • Five fabric backplane 40Gbps interfaces (fabric1 to fabric5) for data communications across the FortiGate-5000 chassis fabric backplane

You can use the following get command to display the FortiGate-5001E NP6 configuration. The command output shows both NP6s connected to each interface with cross-chip offloading supported for all interfaces connected to the NP6 processors. You can also use the diagnose npu np6 port-list command to display this information.

get hardware npu np6 port-list 
Chip                  XAUI Ports   Max     Cross-chip 
                                   Speed   offloading 
--------------------  ---- ------  ------- ---------- 
NP#0-1                0-3  port1   40000M  Yes        
NP#0-1                0-3  port2   40000M  Yes        
NP#0-1                0-3  port3   10000M  Yes        
NP#0-1                0-3  port4   10000M  Yes        
NP#0-1                0-3  base1   1000M   Yes        
NP#0-1                0-3  base2   1000M   Yes        
NP#0-1                0-3  fabric1 40000M  Yes        
NP#0-1                0-3  fabric2 40000M  Yes        
NP#0-1                0-3  fabric3 40000M  Yes        
NP#0-1                0-3  fabric4 40000M  Yes        
NP#0-1                0-3  fabric5 40000M  Yes        
--------------------  ---- ------  ------- ---------- 

Distributing traffic evenly among the NP6 processors can optimize performance. For details, see Optimizing NP6 performance by distributing traffic to XAUI links.

You can also add LAGs to improve performance. For details, see Increasing NP6 offloading capacity using link aggregation groups (LAGs).

If the FortiGate-5001E or 5001E1 is operating as part of an SLBC system, the output of the get hardware npu np6 port-list command shows links to FortiController front panel interfaces, FortiController trunk interfaces, and to the NP6 processors in other FortiGate-5001Es or 5001E1s in the chassis:

get hardware npu np6 port-list
Chip                  XAUI Ports    Max     Cross-chip 
			                        Speed   offloading 
--------------------  ---- ------   ------- ----------
NP#0-1                0-3  port1    40000M  Yes
NP#0-1                0-3  port2    40000M  Yes
NP#0-1                0-3  port3    10000M  Yes
NP#0-1                0-3  port4    10000M  Yes
NP#0-1                0-3  base1    1000M   Yes
NP#0-1                0-3  base2    1000M   Yes
NP#0-1                0-3  elbc-ctrl/1 40000M Yes
NP#0-1                0-3  elbc-ctrl/2 40000M Yes
NP#0-1                0-3  np6_0_8  40000M  Yes
NP#0-1                0-3  np6_0_9  40000M  Yes
NP#0-1                0-3  np6_0_10 40000M  Yes
NP#0-1                0-3  np6_0_17 40000M  Yes
NP#0-1                0-3  np6_0_18 40000M  Yes
NP#0-1                0-3  np6_0_19 40000M  Yes
NP#0-1                0-3  np6_0_20 40000M  Yes
NP#0-1                0-3  np6_0_21 40000M  Yes
NP#0-1                0-3  np6_0_22 40000M  Yes
NP#0-1                0-3  np6_0_23 40000M  Yes
NP#0-1                0-3  np6_0_24 40000M  Yes
NP#0-1                0-3  fctrl1/trunk01 40000M Yes
NP#0-1                0-3  fctrl2/trunk01 40000M Yes
NP#0-1                0-3  np6_0_27 40000M  Yes
NP#0-1                0-3  np6_0_28 40000M  Yes
NP#0-1                0-3  np6_0_29 40000M  Yes
NP#0-1                0-3  np6_0_30 40000M  Yes
NP#0-1                0-3  np6_0_31 40000M  Yes
NP#0-1                0-3  np6_0_32 40000M  Yes
NP#0-1                0-3  fctrl1/f1-1 10000M Yes
NP#0-1                0-3  fctrl2/f1-1 10000M Yes
NP#0-1                0-3  fctrl1/f1-2 10000M Yes
NP#0-1                0-3  fctrl2/f1-2 10000M Yes
NP#0-1                0-3  fctrl1/f1-3 10000M Yes
NP#0-1                0-3  fctrl2/f1-3 10000M Yes
NP#0-1                0-3  fctrl1/f1-4 10000M Yes
NP#0-1                0-3  fctrl2/f1-4 10000M Yes
NP#0-1                0-3  fctrl1/f1-5 10000M Yes
NP#0-1                0-3  fctrl2/f1-5 10000M Yes
NP#0-1                0-3  fctrl1/f1-6 10000M Yes
NP#0-1                0-3  fctrl2/f1-6 10000M Yes
NP#0-1                0-3  fctrl1/f1-7 10000M Yes
NP#0-1                0-3  fctrl2/f1-7 10000M Yes
NP#0-1                0-3  fctrl1/f1-8 10000M Yes
NP#0-1                0-3  fctrl2/f1-8 10000M Yes
NP#0-1                0-3  fctrl1/f1-9 10000M Yes
NP#0-1                0-3  fctrl2/f1-9 10000M Yes
NP#0-1                0-3  fctrl1/f1-10 10000M Yes
NP#0-1                0-3  fctrl2/f1-10 10000M Yes
NP#0-1                0-3  fctrl1/f2-1 10000M Yes
NP#0-1                0-3  fctrl2/f2-1 10000M Yes
NP#0-1                0-3  fctrl1/f2-2 10000M Yes
NP#0-1                0-3  fctrl2/f2-2 10000M Yes
NP#0-1                0-3  fctrl1/f2-3 10000M Yes
NP#0-1                0-3  fctrl2/f2-3 10000M Yes
NP#0-1                0-3  fctrl1/f2-4 10000M Yes
NP#0-1                0-3  fctrl2/f2-4 10000M Yes
NP#0-1                0-3  fctrl1/f2-5 10000M Yes
NP#0-1                0-3  fctrl2/f2-5 10000M Yes
NP#0-1                0-3  fctrl1/f2-6 10000M Yes
NP#0-1                0-3  fctrl2/f2-6 10000M Yes
NP#0-1                0-3  fctrl1/f2-7 10000M Yes
NP#0-1                0-3  fctrl2/f2-7 10000M Yes
NP#0-1                0-3  fctrl1/f2-8 10000M Yes
NP#0-1                0-3  fctrl2/f2-8 10000M Yes
NP#0-1                0-3  fctrl1/f2-9 10000M Yes
NP#0-1                0-3  fctrl2/f2-9 10000M Yes
NP#0-1                0-3  fctrl1/f2-10 10000M Yes
NP#0-1                0-3  fctrl2/f2-10 10000M Yes
--------------------  ---- ------ ------- ----------

Splitting front panel interfaces

You can use the following CLI command to split the port1 and port2 front panel interfaces into four interfaces.

config system global

set split-port {port1 port2}

end