FortiGate-3700D fast path architecture

Chapter 8 Hardware Acceleration : FortiGate NP6 architectures : FortiGate-3700D fast path architecture

The FortiGate-3700D features four NP6 processors.

• Port25 through port28, SFP+ 10Gb interfaces, share connections to the first NP6 processor.

• Port29 through port32, SFP+ 10Gb interfaces, share connections to the second NP6 processor.

• Ten SFP+ 10Gb interfaces, port5 through port14, and two 40Gb QSFP interfaces, port1 and port2 share connections to the third NP6 processor.

• Ten SFP+ 10Gb interfaces, port15 through port24, and two 40Gb QSFP interfaces, port3 and port4 share connections to the fourth NP6 processor.

Ports 25 to 32 can be used for low latency offloading. As long as traffic enters and exits the FortiGate-3700D through ports connected to the same NP6 processor and using these low latency ports the traffic will be offloaded and have lower latency that other NP6 offloaded traffic. Latency is reduced by bypassing the integrated switch fabric. Specifically:

• Port25 through port28, share connections to the first NP6 processor so sessions entering one of these ports and exiting through another will experience low latency

• Port29 through port32, share connections to the second NP6 processor so sessions entering one of these ports and exiting through another will experience low latency

You can use the following command to display the FortiGate-3700D NP6 configuration. The command output shows four NP6s named NP6_0, NP6_1, NP6_2, and NP6_3. The output also shows the interfaces (ports) connected to each NP6.

diag npu np6 port-list

Chip XAUI Ports Max Cross-chip

Speed offloading

------ ---- ------- ----- ----------

np6_0 0 port25 10G Yes

1 port26 10G Yes

2 port27 10G Yes

3 port28 10G Yes

------ ---- ------- ----- ----------

np6_1 0 port29 10G Yes

1 port30 10G Yes

2 port31 10G Yes

3 port32 10G Yes

------ ---- ------- ----- ----------

np6_2 0 port5 10G Yes

0 port9 10G Yes

0 port13 10G Yes

1 port6 10G Yes

1 port10 10G Yes

1 port14 10G Yes

2 port7 10G Yes

2 port11 10G Yes

3 port8 10G Yes

3 port12 10G Yes

0-3 port1 40G Yes

0-3 port2 40G Yes

------ ---- ------- ----- ----------

np6_3 0 port15 10G Yes

0 port19 10G Yes

0 port23 10G Yes

1 port16 10G Yes

1 port20 10G Yes

1 port24 10G Yes

2 port17 10G Yes

2 port21 10G Yes

3 port18 10G Yes

3 port22 10G Yes

0-3 port3 40G Yes

0-3 port4 40G Yes

------ ---- ------- ----- ----------