FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
sahmed_FTNT
Staff & Editor
Staff & Editor
Article Id 382588
Description This article describes the Console error 'NP6XLITE: __np6xlite_tunmgr_write:61 timeout' or 'NP6XLITE: __np6xlite_tunmgr_read:114 timeout'.
Scope FortiGate.
Solution

If a CPU spike hits tunmgr write or read timeout is observed with the below error on the console session:

 

NP6XLITE: __np6xlite_tunmgr_write:61 timeout

NP6XLITE: __np6xlite_tunmgr_write:70 timeout

 

Or:

 

NP6XLITE: __np6xlite_tunmgr_read:114 timeout

 

This known issue is tracked under Issue #1117005 and has been resolved in FortiOS v7.4.8, available on the Fortinet Support Portal.

 

Note: In some instances, this issue may cause the HA heartbeat to be lost, potentially leading to a split-brain scenario. It can also result in the loss of management access and disrupt all services, including console access.

 

The following workarounds can be applied:

  1. Disable npu-offload under the IPsec Phase1 settings:

 

config vpn ipsec phase1-interface
    edit <Phase1 Name>
        set npu-offload disable
end

 

Or: 

 

  1. Disable NP offloading:

     

config system np6xlite
    edit np6xlite_0
        set fastpath disable
end