Fortinet white logo
Fortinet white logo

Hyperscale Firewall Guide

config np-queues

config np-queues

Use the following command to configure priority settings for traffic passing through NP7 processors. These priority settings are applied to packets accepted by the NP7 processor. The priority settings are then used by the NP7 Host Protection Engine (HPE) and DSW systems that make decisions based on traffic priority settings.

For information about configuring the HPE, see config hpe.

For information about configuring DSW settings, see config dsw-dts-profile and config dsw-queue-dts-profile.

The default NP7 queue protocol configuration includes most common types of traffic that might be considered to be high-priority traffic for most networks. You can add and remove traffic types if required for your network.

config system npu

config np-queues

config profile

edit <profile-id>

set type {cos | dscp}

set weight <weight>

set {cos0 | cos1 | ... | cos7} {queue0 | queue1 | ... | queue7}

set {dscp0 | dscp1 | ... | dscp63} {queue0 | queue1 | ... | queue7}

end

config ethernet-type

edit <ethernet-type-name>

set type <ethertype>

set queue <queue>

set weight <weight>

end

config ip-protocol

edit <protocol-name>

set protocol <ip-protocol-number>

set queue <queue>

set weight <weight>

end

config ip-service

edit <service-name>

set protocol <ip-protocol-number>

set sport <port-number>

set dport <port-number>

set queue <queue>

set weight <weight>

end

config scheduler

edit <schedule-name>

set mode {none | priority | round-robin}

end

config profile configure NP7 class profiles.

  • type the profile type. Select cos (the default) for VLAN priority or dscp for IP differentiated services code point (DSCP) priority.

  • weight set a weight for the profile. Range 0 to 15, default 6.

  • cos0 to cos7 if type is set to cos, select a queue number (queue1 to queue7) for each CoS. By default, each CoS is assigned a queue with the corresponding number. For example, cos1 is assigned queue1, cos2 is assigned queue2 and so on.

  • dscp0 to dscp63 if type is set to dscp, select a queue number (queue1 to queue7) for each DSCP.

config ethernet-type configure NP7 QoS settings for different ethernet types. The default configuration includes the following ethernet types: ARP, HA-SESSYNC, HA-DEF, HC-DEF, L2EP-DEF, and LACP. You can edit these pre-configured ethernet types to change the queue and weight. You can also add new ethernet types.

  • type the ethertype number of the ethernet type to be configured. For example, for ARP type would be 806 (and not 0x0806).

  • queue the queue number. Range 0 to 11, the default when you create a new ethernet type is 0.

  • weight the class weight for the ethernet type in the range of 0 to 15, the default weight is 15.

config ip-protocol configure NP7 QoS settings for different IP protocols. The default configuration includes these pre-configured IP protocols: OSPF, IGMP, and ICMP. You can edit these pre-configured IP protocols to change the queue and weight. You can also add new IP protocols.

  • protocol the protocol number of the IP protocol to be configured.

  • queue the queue number. Range 0 to 11, the default when you create a new IP protocol is 0.

  • weight the class weight for the IP protocol in the range of 0 to 15, the default weight is 14.

config ip-service configure NP7 QoS settings for different IP services. The default configuration includes these pre-configured IP services: IKE, BGP, BFD-single-hop, BFD-multiple-hop, SLBC-management, SLBC-1, and SLBC-2. You can edit these pre-configured IP services to change the queue and weight. You can also add new IP services.

  • protocol the protocol number of the IP service to be configured.

  • sport the source port number used by the service.

  • dport the destination port number used by the service.

  • queue the queue number. Range 0 to 11, the default when you create a new IP service is 0.

  • weight the class weight for the IP service in the range of 0 to 15, the default weight is 13.

config scheduler configure NP7 QoS schedules.

  • mode the scheduler mode. Can be none, priority, or round-robin.

Default NP7 queue protocol prioritization configuration

config np-queues

config np-queues

Use the following command to configure priority settings for traffic passing through NP7 processors. These priority settings are applied to packets accepted by the NP7 processor. The priority settings are then used by the NP7 Host Protection Engine (HPE) and DSW systems that make decisions based on traffic priority settings.

For information about configuring the HPE, see config hpe.

For information about configuring DSW settings, see config dsw-dts-profile and config dsw-queue-dts-profile.

The default NP7 queue protocol configuration includes most common types of traffic that might be considered to be high-priority traffic for most networks. You can add and remove traffic types if required for your network.

config system npu

config np-queues

config profile

edit <profile-id>

set type {cos | dscp}

set weight <weight>

set {cos0 | cos1 | ... | cos7} {queue0 | queue1 | ... | queue7}

set {dscp0 | dscp1 | ... | dscp63} {queue0 | queue1 | ... | queue7}

end

config ethernet-type

edit <ethernet-type-name>

set type <ethertype>

set queue <queue>

set weight <weight>

end

config ip-protocol

edit <protocol-name>

set protocol <ip-protocol-number>

set queue <queue>

set weight <weight>

end

config ip-service

edit <service-name>

set protocol <ip-protocol-number>

set sport <port-number>

set dport <port-number>

set queue <queue>

set weight <weight>

end

config scheduler

edit <schedule-name>

set mode {none | priority | round-robin}

end

config profile configure NP7 class profiles.

  • type the profile type. Select cos (the default) for VLAN priority or dscp for IP differentiated services code point (DSCP) priority.

  • weight set a weight for the profile. Range 0 to 15, default 6.

  • cos0 to cos7 if type is set to cos, select a queue number (queue1 to queue7) for each CoS. By default, each CoS is assigned a queue with the corresponding number. For example, cos1 is assigned queue1, cos2 is assigned queue2 and so on.

  • dscp0 to dscp63 if type is set to dscp, select a queue number (queue1 to queue7) for each DSCP.

config ethernet-type configure NP7 QoS settings for different ethernet types. The default configuration includes the following ethernet types: ARP, HA-SESSYNC, HA-DEF, HC-DEF, L2EP-DEF, and LACP. You can edit these pre-configured ethernet types to change the queue and weight. You can also add new ethernet types.

  • type the ethertype number of the ethernet type to be configured. For example, for ARP type would be 806 (and not 0x0806).

  • queue the queue number. Range 0 to 11, the default when you create a new ethernet type is 0.

  • weight the class weight for the ethernet type in the range of 0 to 15, the default weight is 15.

config ip-protocol configure NP7 QoS settings for different IP protocols. The default configuration includes these pre-configured IP protocols: OSPF, IGMP, and ICMP. You can edit these pre-configured IP protocols to change the queue and weight. You can also add new IP protocols.

  • protocol the protocol number of the IP protocol to be configured.

  • queue the queue number. Range 0 to 11, the default when you create a new IP protocol is 0.

  • weight the class weight for the IP protocol in the range of 0 to 15, the default weight is 14.

config ip-service configure NP7 QoS settings for different IP services. The default configuration includes these pre-configured IP services: IKE, BGP, BFD-single-hop, BFD-multiple-hop, SLBC-management, SLBC-1, and SLBC-2. You can edit these pre-configured IP services to change the queue and weight. You can also add new IP services.

  • protocol the protocol number of the IP service to be configured.

  • sport the source port number used by the service.

  • dport the destination port number used by the service.

  • queue the queue number. Range 0 to 11, the default when you create a new IP service is 0.

  • weight the class weight for the IP service in the range of 0 to 15, the default weight is 13.

config scheduler configure NP7 QoS schedules.

  • mode the scheduler mode. Can be none, priority, or round-robin.

Default NP7 queue protocol prioritization configuration