Fortinet white logo
Fortinet white logo

Hardware Acceleration

FortiGate 70G and 71G fast path architecture

FortiGate 70G and 71G fast path architecture

The FortiGate 70G and 71G includes the SOC5 (also called the SP5) and uses the SOC5 CPU, NP7Lite processor, and CP10 content processor. The SOC5 ISF connects all of the FortiGate 70G and 71G front panel data interfaces to the NP7Lite processor. The FortiGate 70G and 71G do not support DoS policy hardware acceleration, see DoS policy hardware acceleration.

The FortiGate 70G and 71G features the following front panel interfaces:

  • Ten 10/100/1000BASE-T RJ45 (1-6, A, B, WAN1 and WAN2) connected to the SOC5 integrated switch fabric. A and B are FortiLink interfaces.

The SOC5 includes an integrated switch fabric (ISF) that connects all of the front panel network interfaces to the NP7Lite processor. The SOC5 ISF allows sessions passing between any FortiGate front panel interface pair to be offloaded by the NP7Lite processor. The SOC5 ISF also allows you to use the command config system virtual-switch to create a virtual hardware switch that can include any front panel interface connected to the SOC5.

Note

To add an interface to a hardware switch, its mode must be set to static and the interface can't be used in any other configuration. For example, you can't have a firewall policy that references the interface.

You can use the command diagnose npu np7lite port-list to display the FortiGate 70G or 71G NP7Lite configuration.

diagnose npu np7lite port-list 
Front Panel Port:

Name     Max_speed(Mbps) Dflt_speed(Mbps) NP_lane PHY_address 
-------- --------------- ---------------- ------- -----------
wan1     1000            1000             8       0x0
wan2     1000            1000             12      0x1
port1    1000            1000             3       0xf
port2    1000            1000             2       0xe
port3    1000            1000             1       0xd
port4    1000            1000             0       0xc
port5    1000            1000             7       0xb
port6    1000            1000             6       0xa
a        1000            1000             5       0x9
b        1000            1000             4       0x8
-------- --------------- ---------------- ------- ----------- 

FortiGate 70G and 71G fast path architecture

FortiGate 70G and 71G fast path architecture

The FortiGate 70G and 71G includes the SOC5 (also called the SP5) and uses the SOC5 CPU, NP7Lite processor, and CP10 content processor. The SOC5 ISF connects all of the FortiGate 70G and 71G front panel data interfaces to the NP7Lite processor. The FortiGate 70G and 71G do not support DoS policy hardware acceleration, see DoS policy hardware acceleration.

The FortiGate 70G and 71G features the following front panel interfaces:

  • Ten 10/100/1000BASE-T RJ45 (1-6, A, B, WAN1 and WAN2) connected to the SOC5 integrated switch fabric. A and B are FortiLink interfaces.

The SOC5 includes an integrated switch fabric (ISF) that connects all of the front panel network interfaces to the NP7Lite processor. The SOC5 ISF allows sessions passing between any FortiGate front panel interface pair to be offloaded by the NP7Lite processor. The SOC5 ISF also allows you to use the command config system virtual-switch to create a virtual hardware switch that can include any front panel interface connected to the SOC5.

Note

To add an interface to a hardware switch, its mode must be set to static and the interface can't be used in any other configuration. For example, you can't have a firewall policy that references the interface.

You can use the command diagnose npu np7lite port-list to display the FortiGate 70G or 71G NP7Lite configuration.

diagnose npu np7lite port-list 
Front Panel Port:

Name     Max_speed(Mbps) Dflt_speed(Mbps) NP_lane PHY_address 
-------- --------------- ---------------- ------- -----------
wan1     1000            1000             8       0x0
wan2     1000            1000             12      0x1
port1    1000            1000             3       0xf
port2    1000            1000             2       0xe
port3    1000            1000             1       0xd
port4    1000            1000             0       0xc
port5    1000            1000             7       0xb
port6    1000            1000             6       0xa
a        1000            1000             5       0x9
b        1000            1000             4       0x8
-------- --------------- ---------------- ------- -----------