Chapter 8 Hardware Acceleration : Hardware acceleration overview : Network processors (NP1, NP2, NP3, NP4 and NP6) : Configuring NP accelerated VPN encryption/decryption offloading
  
Configuring NP accelerated VPN encryption/decryption offloading
Network processing unit (npu) settings configure offloading behavior for IPsec VPN. Configured behavior applies to all network processors contained by the FortiGate unit itself or any installed AMC modules.
config system npu
set enc-offload-antireplay {enable | disable}
set dec-offload-antireplay {enable | disable}
set offload-ipsec-host {enable | disable}
end
 
Variables
Description
Default
enc-offload-antireplay {enable | disable}
Enable or disable offloading of IPsec encryption.
This option is used only when replay detection is enabled in Phase 2 configuration. If replay detection is disabled, encryption is always offloaded.
disable
dec-offload-antireplay {enable | disable}
Enable or disable offloading of IPsec decryption.
This option is used only when replay detection is enabled in Phase 2 configuration. If replay detection is disabled, decryption is always offloaded.
enable
offload-ipsec-host {enable | disable}
Enable or disable offloading of IPsec encryption of traffic from local host (FortiGate unit).
Note: For this option to take effect, the FortiGate unit must have previously sent the security association (SA) to the network processor.
disable