Fortigate VMware SRIOV Mellanox

[bundyboy-uk]

Hi, 

I am setting-up a FGVM-04 7.2.5 on vmware 7.0u3.  I followed the vmware private cloud guide:

https://docs.fortinet.com/document/fortigate-private-cloud/7.2.0/vmware-esxi-administration-guide/se...

I plan to use a single "physical" interface from the fortigate and use sub-interfaces for each customer. I configured SRIOV on the vmware, DPDK on the fortigate...the issue is that when I create two sub-interfaces on the port, only one works.  If i move one to another "physical port" of the fortigate, both are working. Both interfaces goes to the same port-group/vswitch/physical interface of the host.So I guess there is an issue when trying to use 2 vlans on the same VF...

The guide mentions that we need to activate "trust" and disable "spoof check" on the VF but the example if for an intel NIC.  We are using mellanox connect-x6 NICs and I cannot find similar configuration.

has some already done such setup?  

Thanks

[abarushka]

Hello,

Can you please elaborate what you mean by not working VLAN interface (i.e. packets are dropped, packets are not generated, etc)?

[bundyboy-uk]

Hi, 

I think the issue is with dpdk, when dpdk is on, I have no traffic. When I turn it off, traffic is restored. 

Can you please confirm if vlan interfaces are supported with DPDK? 

Thanks

[abarushka]

Hello,

I am not aware about VLAN support limitation imposed by DPDK.

However, you may consider to open a TAC case in order to verify whether Mellanox connect-x6 NIC is supported by DPDK (FortiOS 7.2.5 GA).