Fortinet white logo
Fortinet white logo

Hyperscale Firewall Guide

pba-port-select-mode {random | direct}

pba-port-select-mode {random | direct}

Use the following command to select the port selection mode for hyperscale CGNAT port block allocation (PBA) IP pools.

config system npu

set pba-port-select-mode {random | direct}

end

random randomized port selection mode.

direct (the default) direct port selection mode.

Direct port selection mode, the default, means that NP7 processors select CGANAT PBA port numbers from a port range in order. This can result in quick port number re-use because as soon as a port numbers low in the port range are available they may be selected again. In some network configurations and with some clients, quick port number re-use can cause delays for some clients.

You may be able to resolve these delays by setting pba-port-select-mode to random. In random mode, the first time the NP7 processor selects a port from a port range, the first port number in the range is selected. After selecting the first port number, random mode randomly selects any port number in the range. Selecting a random port number makes it less likely to quickly re-use the same port numbers.

pba-port-select-mode {random | direct}

pba-port-select-mode {random | direct}

Use the following command to select the port selection mode for hyperscale CGNAT port block allocation (PBA) IP pools.

config system npu

set pba-port-select-mode {random | direct}

end

random randomized port selection mode.

direct (the default) direct port selection mode.

Direct port selection mode, the default, means that NP7 processors select CGANAT PBA port numbers from a port range in order. This can result in quick port number re-use because as soon as a port numbers low in the port range are available they may be selected again. In some network configurations and with some clients, quick port number re-use can cause delays for some clients.

You may be able to resolve these delays by setting pba-port-select-mode to random. In random mode, the first time the NP7 processor selects a port from a port range, the first port number in the range is selected. After selecting the first port number, random mode randomly selects any port number in the range. Selecting a random port number makes it less likely to quickly re-use the same port numbers.