Enabling NP7 inter-VDOM links to accelerate VRF route leaking

Using Virtual Routing and Forwarding (VRF) you can add multiple virtual routing domains (also called VRFs) to your FortiGate (see Virtual routing and forwarding).

VRF route leaking uses inter-VDOM link interfaces to send traffic between virtual routing domains. On FortiGates with NP7 processors, you can use NPU inter-VDOM links to accelerate this inter-VDOM link traffic.

You can use the following command to enable NPU inter-VDOM links without enabling multi-VDOM mode:

config system global

set single-vdom-npuvlink enable

end

After entering this command, the NPU inter-VDOM links (npu0_vlink0, npu0_vlink1, and so on) are visible from the GUI and CLI and you can configure them to send traffic between virtual routing domains.

For some example VRF with route leaking configurations, see:

• Route leaking between VRFs with BGP

• Route leaking between multiple VRFs

• Support cross-VRF local-in and local-out traffic for local services

In all of these examples you can make NPU VDOM links available by enabling multi-VDOM mode or enabling single-vdom-npuvlink. Otherwise the configuration is the same.

The single-vdom-npuvlink command is not available if multi-VDOM mode is enabled.