Technical Tip: Console error 'NP6XLITE: __np6xlite_tunmgr_write:61 timeout' or 'NP6XLITE: __np6xlite_tunmgr_read:114 timeout' after the upgrade to v7.0.16, v7.2.11, v7.4.6

If a CPU spike hits tunmgr write or read timeout is observed with the below error on the console session:

NP6XLITE: __np6xlite_tunmgr_write:61 timeout

NP6XLITE: __np6xlite_tunmgr_write:70 timeout

Or:

NP6XLITE: __np6xlite_tunmgr_read:114 timeout

This known issue is tracked under Issue #1117005 and has been resolved in v7.2.12, v7.4.8, and v7.6.4 available on the Fortinet Support Portal

Note:

In some instances, this issue may cause the HA heartbeat to be lost, potentially leading to a split-brain scenario.

It can also result in the loss of management access and disrupt all services, including console access.

The following workarounds can be applied:

1. Disable NPUs offload under the IPsec Phase1 settings:

config vpn ipsec phase1-interface
    edit <Phase1 Name>
        set npu-offload disable
end

Or: 

2. Disable NP offloading:

    

config system np6xlite
    edit np6xlite_0
        set fastpath disable
end