Reducing the amount of dropped egress packets on LAG interfaces

In some cases, a FortiGate with NP6 processors may experience dropped egress or EHP packets on LAG interfaces. The dropped packets may be caused by the default algorithm used to select the egress path for packets on LAG interfaces. In some cases, this algorithm can cause fast path congestion.

You can use the following option to enable an algorithm that selects the same NP6 processor and XAUI link for both ingress and egress. Using this algorithm can reduce fast path congestion and also reduce the number of dropped egress packets and imp[rove LAG interface performance.

Use the following command to change the algorithm used for egress traffic on LAG interfaces

config system npu

set lag-out-port-select {disable | enable}

end

The default option is disable. Select enable and monitor performance and dropped packets to see if there are improvements.

The following options performed similar functions in previous versions of FortiOS and have been replaced with the current option: config system npu set lag-sw-out-trunk {disable | enable} end config system np6 edit np6_0 set lag-npu {disable | enable}