vxlan-offload {disable | enable}

You can use the following command to enable or disable NP7 offloading of traffic that is passing through a VXLAN interface.

config system npu

set vxlan-offload {disable | enable}

end

Depending on the network configuration, traffic passing through a VXLAN interface may or may not be offloaded by NP7 processors. This option is enabled by default. If traffic passing through a VXLAN interface is blocked, you can set this option to disable to send all VXLAN traffic to the CPU. This will result in a performance reduction but that traffic should be able to pass through the FortiGate.