Fortigate 50G-SFP, Dual WAN

Forum|Forum|1 year ago
October 2, 2024
6 replies
4423 views

Hi,

The Fortigate 50G-SFP documentation does not specify whether the SFP port can function as a secondary WAN. Does anyone have information about this?

Thanks!

FortiGate

Best answer by johnathan

The only real difference between interfaces, apart from the label, is how the ports are hooked up to the NPU.
For example, on larger units the HA or MGMT ports are not NPU accelerated. You probably shouldn't use these for heavy traffic, but you can do it if you want.
Generally, all SFP and general ports are always NPU accelerated.

You can refer to the fastpath document to confirm this for each model.
See this for the 50G: https://docs.fortinet.com/document/fortigate/7.0.12/hardware-acceleration/201529/fortigate-50g-and-51g-fast-path-architecture
For this model, all ports are NPU accelerated and there will not be any difference when configuring one of those ports as a second WAN link.

johnathan

Staff

You can use whatever port you want for the WAN, FortiOS does not place any restrictions for this.

Never trust a computer you can't throw out a window.

DannyVAuthor

Visitor III

Thanks for the response. I noticed that many Fortigate models, like the 50G-SFP-PoE model includes two WAN ports. What's the difference between this and, for example, a SFP port as a secondary WAN? Any limitations? Can be used in a SD-WAN?

johnathanAnswer

Staff

The only real difference between interfaces, apart from the label, is how the ports are hooked up to the NPU.
For example, on larger units the HA or MGMT ports are not NPU accelerated. You probably shouldn't use these for heavy traffic, but you can do it if you want.
Generally, all SFP and general ports are always NPU accelerated.

You can refer to the fastpath document to confirm this for each model.
See this for the 50G: https://docs.fortinet.com/document/fortigate/7.0.12/hardware-acceleration/201529/fortigate-50g-and-51g-fast-path-architecture
For this model, all ports are NPU accelerated and there will not be any difference when configuring one of those ports as a second WAN link.

Never trust a computer you can't throw out a window.

Sign up

Login with SSO

Login to the community

Login with SSO