Fortinet black logo

New Features

NPU support for GTP-U encapsulated in IPv6 6.4.3

NPU support for GTP-U encapsulated in IPv6 6.4.3

The gtp-enhanced-mode parameter under config system npu can enable offloading GTP-U traffic.

To enable GTP enhancement mode:
config system npu
    set gtp-enhanced-mode enable
end

After the IPv6 GTP tunnel has been established and there is GTP-U traffic, verify the IPv6 session list to confirm those sessions were offloaded to NPU (GTPU_offload). The NPU packet count can also be verified.

To verify the IPv6 session list:
# diagnose sys session6 list

session6 info: proto=17 proto_state=01 duration=3 expire=179 timeout=0 flags=00000000 sockport=0 socktype=0 use=3
origin-shaper=
reply-shaper=
per_ip_shaper=
class_id=0 ha_id=0 policy_dir=0 tunnel=/ helper=gtp-c vlan_cos=0/0
state=may_dirty npu npd 
statistic(bytes/packets/allow_err): org=339/2/0 reply=232/2/0 tuples=2
tx speed(Bps/kbps): 104/0 rx speed(Bps/kbps): 71/0
orgin->sink: org pre->post, reply pre->post dev=34->33/33->34
hook=pre dir=org act=noop 2000:119:10:10::1:2123 ->2000:120:41:30::1:2123(:::0)
hook=post dir=reply act=noop 2000:120:41:30::1:2123 ->2000:119:10:10::1:2123(:::0)
gtp=gtpp
misc=0 policy_id=1 auth_info=0 chk_client_info=0 vd=0
serial=000087cc tos=ff/ff ips_view=0 app_list=0 app=0 url_cat=0
ngfwid=n/a
npu_state=0x100000
npu info: flag=0x00/0x00, offload=0/0, ips_offload=0/0, epid=0/0, ipid=0/0, vlan=0x0000/0x0000
vlifid=0/0, vtag_in=0x0000/0x0000 in_npu=0/0, out_npu=0/0, fwd_en=0/0, qid=0/0
no_ofld_reason:  offload-denied helper

session6 info: proto=17 proto_state=01 duration=0 expire=179 timeout=0 flags=00000000 sockport=0 socktype=0 use=3
origin-shaper=
reply-shaper=
per_ip_shaper=
class_id=0 ha_id=0 policy_dir=0 tunnel=/ helper=gtp-u vlan_cos=0/0
state=may_dirty npu 
statistic(bytes/packets/allow_err): org=268/2/0 reply=272/2/0 tuples=2
tx speed(Bps/kbps): 0/0 rx speed(Bps/kbps): 0/0
orgin->sink: org pre->post, reply pre->post dev=34->33/33->34
hook=pre dir=org act=noop 2000:119:10:10::1:2152 ->2000:120:41:30::1:2152(:::0)
hook=post dir=reply act=noop 2000:120:41:30::1:2152 ->2000:119:10:10::1:2152(:::0)
gtp=gtpp
misc=0 policy_id=1 auth_info=0 chk_client_info=0 vd=0
serial=000087cf tos=ff/ff ips_view=0 app_list=0 app=0 url_cat=0
ngfwid=n/a
npu_state=0x000e00 GTPU_offload
npu info: flag=0x81/0x81, offload=8/8, ips_offload=0/0, epid=107/107, ipid=494/488, vlan=0x0000/0x0000
vlifid=494/488, vtag_in=0x0000/0x0000 in_npu=1/1, out_npu=1/1, fwd_en=0/0, qid=25/25
To verify the NPU packet count:
# diagnose npu np6 hbq-stats all
    cpu_ 0:0
    ...            
    cpu_52:73              
    ...           
   Total  :73

NPU support for GTP-U encapsulated in IPv6 6.4.3

The gtp-enhanced-mode parameter under config system npu can enable offloading GTP-U traffic.

To enable GTP enhancement mode:
config system npu
    set gtp-enhanced-mode enable
end

After the IPv6 GTP tunnel has been established and there is GTP-U traffic, verify the IPv6 session list to confirm those sessions were offloaded to NPU (GTPU_offload). The NPU packet count can also be verified.

To verify the IPv6 session list:
# diagnose sys session6 list

session6 info: proto=17 proto_state=01 duration=3 expire=179 timeout=0 flags=00000000 sockport=0 socktype=0 use=3
origin-shaper=
reply-shaper=
per_ip_shaper=
class_id=0 ha_id=0 policy_dir=0 tunnel=/ helper=gtp-c vlan_cos=0/0
state=may_dirty npu npd 
statistic(bytes/packets/allow_err): org=339/2/0 reply=232/2/0 tuples=2
tx speed(Bps/kbps): 104/0 rx speed(Bps/kbps): 71/0
orgin->sink: org pre->post, reply pre->post dev=34->33/33->34
hook=pre dir=org act=noop 2000:119:10:10::1:2123 ->2000:120:41:30::1:2123(:::0)
hook=post dir=reply act=noop 2000:120:41:30::1:2123 ->2000:119:10:10::1:2123(:::0)
gtp=gtpp
misc=0 policy_id=1 auth_info=0 chk_client_info=0 vd=0
serial=000087cc tos=ff/ff ips_view=0 app_list=0 app=0 url_cat=0
ngfwid=n/a
npu_state=0x100000
npu info: flag=0x00/0x00, offload=0/0, ips_offload=0/0, epid=0/0, ipid=0/0, vlan=0x0000/0x0000
vlifid=0/0, vtag_in=0x0000/0x0000 in_npu=0/0, out_npu=0/0, fwd_en=0/0, qid=0/0
no_ofld_reason:  offload-denied helper

session6 info: proto=17 proto_state=01 duration=0 expire=179 timeout=0 flags=00000000 sockport=0 socktype=0 use=3
origin-shaper=
reply-shaper=
per_ip_shaper=
class_id=0 ha_id=0 policy_dir=0 tunnel=/ helper=gtp-u vlan_cos=0/0
state=may_dirty npu 
statistic(bytes/packets/allow_err): org=268/2/0 reply=272/2/0 tuples=2
tx speed(Bps/kbps): 0/0 rx speed(Bps/kbps): 0/0
orgin->sink: org pre->post, reply pre->post dev=34->33/33->34
hook=pre dir=org act=noop 2000:119:10:10::1:2152 ->2000:120:41:30::1:2152(:::0)
hook=post dir=reply act=noop 2000:120:41:30::1:2152 ->2000:119:10:10::1:2152(:::0)
gtp=gtpp
misc=0 policy_id=1 auth_info=0 chk_client_info=0 vd=0
serial=000087cf tos=ff/ff ips_view=0 app_list=0 app=0 url_cat=0
ngfwid=n/a
npu_state=0x000e00 GTPU_offload
npu info: flag=0x81/0x81, offload=8/8, ips_offload=0/0, epid=107/107, ipid=494/488, vlan=0x0000/0x0000
vlifid=494/488, vtag_in=0x0000/0x0000 in_npu=1/1, out_npu=1/1, fwd_en=0/0, qid=25/25
To verify the NPU packet count:
# diagnose npu np6 hbq-stats all
    cpu_ 0:0
    ...            
    cpu_52:73              
    ...           
   Total  :73