FortiGate-5001E and 5001E1 fast path architecture
The FortiGate 5001E and 5001E1 each include two NP6 processors. All front panel data interfaces and both of the NP6 processors connect to the integrated switch fabric (ISF). All data traffic passes from the data interfaces through the ISF to the NP6 processors. Because of the ISF, all supported traffic passing between any two data interfaces can be offloaded by the NP6 processors. No special mapping is required for fast path offloading or aggregate interfaces. Data traffic processed by the CPU takes a dedicated data path through the ISF and an NP6 processor to the CPU.
The FortiGate 5001E and 5001E1 models feature the following interfaces:
- Two 10/100/1000BASE-T Copper (MGMT1 and MGMT2) (not connected to the NP6 processors)
- Two 40 GigE QSFP+ Fabric Channel (1 and 2)
- Two 10 GigE SFP+ Fabric Channel (3 and 4)
-
Two base backplane 1Gbps interfaces (base1 and base2) for HA heartbeat communications across the FortiGate-5000 chassis base backplane.
-
Five fabric backplane 40Gbps interfaces (fabric1 to fabric5) for data communications across the FortiGate-5000 chassis fabric backplane
You can use the following get command to display the FortiGate-5001E NP6 configuration. The command output shows both NP6s connected to each interface with cross-chip offloading supported for all interfaces connected to the NP6 processors. You can also use the diagnose npu np6 port-list command to display this information.
get hardware npu np6 port-list
Chip XAUI Ports Max Cross-chip
Speed offloading
-------------------- ---- ------ ------- ----------
NP#0-1 0-3 port1 40000M Yes
NP#0-1 0-3 port2 40000M Yes
NP#0-1 0-3 port3 10000M Yes
NP#0-1 0-3 port4 10000M Yes
NP#0-1 0-3 base1 1000M Yes
NP#0-1 0-3 base2 1000M Yes
NP#0-1 0-3 fabric1 40000M Yes
NP#0-1 0-3 fabric2 40000M Yes
NP#0-1 0-3 fabric3 40000M Yes
NP#0-1 0-3 fabric4 40000M Yes
NP#0-1 0-3 fabric5 40000M Yes
-------------------- ---- ------ ------- ----------
Distributing traffic evenly among the NP6 processors can optimize performance. For details, see Optimizing NP6 performance by distributing traffic to XAUI links.
You can also add LAGs to improve performance. For details, see Increasing NP6 offloading capacity using link aggregation groups (LAGs).
If the FortiGate-5001E or 5001E1 is operating as part of an SLBC system, the output of the get hardware npu np6 port-list command shows links to FortiController front panel interfaces, FortiController trunk interfaces, and to the NP6 processors in other FortiGate-5001Es or 5001E1s in the chassis:
get hardware npu np6 port-list Chip XAUI Ports Max Cross-chip Speed offloading -------------------- ---- ------ ------- ---------- NP#0-1 0-3 port1 40000M Yes NP#0-1 0-3 port2 40000M Yes NP#0-1 0-3 port3 10000M Yes NP#0-1 0-3 port4 10000M Yes NP#0-1 0-3 base1 1000M Yes NP#0-1 0-3 base2 1000M Yes NP#0-1 0-3 elbc-ctrl/1 40000M Yes NP#0-1 0-3 elbc-ctrl/2 40000M Yes NP#0-1 0-3 np6_0_8 40000M Yes NP#0-1 0-3 np6_0_9 40000M Yes NP#0-1 0-3 np6_0_10 40000M Yes NP#0-1 0-3 np6_0_17 40000M Yes NP#0-1 0-3 np6_0_18 40000M Yes NP#0-1 0-3 np6_0_19 40000M Yes NP#0-1 0-3 np6_0_20 40000M Yes NP#0-1 0-3 np6_0_21 40000M Yes NP#0-1 0-3 np6_0_22 40000M Yes NP#0-1 0-3 np6_0_23 40000M Yes NP#0-1 0-3 np6_0_24 40000M Yes NP#0-1 0-3 fctrl1/trunk01 40000M Yes NP#0-1 0-3 fctrl2/trunk01 40000M Yes NP#0-1 0-3 np6_0_27 40000M Yes NP#0-1 0-3 np6_0_28 40000M Yes NP#0-1 0-3 np6_0_29 40000M Yes NP#0-1 0-3 np6_0_30 40000M Yes NP#0-1 0-3 np6_0_31 40000M Yes NP#0-1 0-3 np6_0_32 40000M Yes NP#0-1 0-3 fctrl1/f1-1 10000M Yes NP#0-1 0-3 fctrl2/f1-1 10000M Yes NP#0-1 0-3 fctrl1/f1-2 10000M Yes NP#0-1 0-3 fctrl2/f1-2 10000M Yes NP#0-1 0-3 fctrl1/f1-3 10000M Yes NP#0-1 0-3 fctrl2/f1-3 10000M Yes NP#0-1 0-3 fctrl1/f1-4 10000M Yes NP#0-1 0-3 fctrl2/f1-4 10000M Yes NP#0-1 0-3 fctrl1/f1-5 10000M Yes NP#0-1 0-3 fctrl2/f1-5 10000M Yes NP#0-1 0-3 fctrl1/f1-6 10000M Yes NP#0-1 0-3 fctrl2/f1-6 10000M Yes NP#0-1 0-3 fctrl1/f1-7 10000M Yes NP#0-1 0-3 fctrl2/f1-7 10000M Yes NP#0-1 0-3 fctrl1/f1-8 10000M Yes NP#0-1 0-3 fctrl2/f1-8 10000M Yes NP#0-1 0-3 fctrl1/f1-9 10000M Yes NP#0-1 0-3 fctrl2/f1-9 10000M Yes NP#0-1 0-3 fctrl1/f1-10 10000M Yes NP#0-1 0-3 fctrl2/f1-10 10000M Yes NP#0-1 0-3 fctrl1/f2-1 10000M Yes NP#0-1 0-3 fctrl2/f2-1 10000M Yes NP#0-1 0-3 fctrl1/f2-2 10000M Yes NP#0-1 0-3 fctrl2/f2-2 10000M Yes NP#0-1 0-3 fctrl1/f2-3 10000M Yes NP#0-1 0-3 fctrl2/f2-3 10000M Yes NP#0-1 0-3 fctrl1/f2-4 10000M Yes NP#0-1 0-3 fctrl2/f2-4 10000M Yes NP#0-1 0-3 fctrl1/f2-5 10000M Yes NP#0-1 0-3 fctrl2/f2-5 10000M Yes NP#0-1 0-3 fctrl1/f2-6 10000M Yes NP#0-1 0-3 fctrl2/f2-6 10000M Yes NP#0-1 0-3 fctrl1/f2-7 10000M Yes NP#0-1 0-3 fctrl2/f2-7 10000M Yes NP#0-1 0-3 fctrl1/f2-8 10000M Yes NP#0-1 0-3 fctrl2/f2-8 10000M Yes NP#0-1 0-3 fctrl1/f2-9 10000M Yes NP#0-1 0-3 fctrl2/f2-9 10000M Yes NP#0-1 0-3 fctrl1/f2-10 10000M Yes NP#0-1 0-3 fctrl2/f2-10 10000M Yes -------------------- ---- ------ ------- ----------
Splitting front panel interfaces
You can use the following CLI command to split the port1 and port2 front panel interfaces into four interfaces.
config system global
set split-port {port1 port2}
end