diagnose npu np6lite npu-feature (verify enabled NP6Lite features)
You can use the diagnose
npu np6lite npu-feature
command to see the NP6Lite features that are enabled on your FortiGate and those that are not.
The following command output, from a FortiGate 200E, shows the default NP6Lite configuration for most FortiGates with NP6Lite processors:
diagnose npu np6lite npu-feature np_0 np_1 ------------------- --------- --------- Fastpath Enabled Enabled IPv4 firewall Yes Yes IPv6 firewall Yes Yes IPv4 IPSec Yes Yes IPv6 IPSec Yes Yes IPv4 tunnel Yes Yes IPv6 tunnel Yes Yes GRE tunnel No No
If you use the following command to disable fastpath:
config system npu
set fastpath disable
end
The npu-feature
command output show this configuration change:
diagnose npu np6lite npu-feature np_0 np_1 ------------------- --------- --------- Fastpath Disabled Disabled IPv4 firewall Yes Yes IPv6 firewall Yes Yes IPv4 IPSec Yes Yes IPv6 IPSec Yes Yes IPv4 tunnel Yes Yes IPv6 tunnel Yes Yes GRE tunnel No No