Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
bmekler
New Contributor III

VDOM links and NPU offload

According to hardware acceleration handbook, traffic that goes over inter-VDOM links can be offloaded to network processors via a special kind of VDOM link. I have a Fortigate 200B (includes NP2) in one location, and a Fortigate 200D (includes NP4lite) in another, and neither shows this special VDOM link as being available. Looking at session list, none of the sessions that tranverse the VDOM links have the "npu info" status, which, I assume, means that they are not offloaded. Sessions within a VDOM that meet fast path requirements (and in case of 200B, enter and exit through NP2-connected ports) do get offloaded.

 

The handbook has the following statements:

 

"FortiGate units with NP4 processors include inter-VDOM links that can be used to accelerate inter-VDOM link traffic"   And   "Some FortiGate units include NP4Lite processors. These network processors have the same functionality and limitations as  NP4 processors but with about half the performance"   As well as   "FortiGate units with NP4 processors include inter-VDOM links that can be used to accelerate inter-VDOM link traffic."   Is that last part not applicable to NP4Lite processors, or do I have a potential configuration issue that prevents me from seeing and using the npu-vlink interfaces? I don't have access to any boxes with the "big boy" NPUs to compare, and while we're considering an upgrade to a pair of 300Ds, which include a full-featured NP6, I want to clear out all potential questions before we part with five figures - the way the handbook is worded, it can be understood that the accelerated VDOM links are a feature of the boxes with two NPUs, i.e. 900D and up.
1 REPLY 1
romanr
Valued Contributor

Hey,

 

afaik this only applies to "real" NP4 and NP6 processors.

 

so starting with 600C or 300D devices upwards.

 

Br,Roman

Labels
Top Kudoed Authors