FortiGate-900D fast path architecture

> Chapter 12 - Hardware Acceleration > FortiGate NP6 architectures > FortiGate-900D fast path architecture

FortiGate-900D fast path architecture

The FortiGate-900D includes two NP6 processors that are not connected by an integrated switch fabric (ISF). Without an ISF, traffic through a FortiGate-900D could experience lower latency than traffic through similar hardware with an ISF. The NP6 processors are connected to network interfaces as follows:

Because the FortiGate-900D does not have an ISF you cannot create Link Aggregation Groups (LAGs) that include interfaces connected to both NP6 processors.

Eight 1Gb SFP interfaces (port17-port24), eight 1Gb RJ-45 Ethernet interfaces (port25-32) and one 10Gb SFP+ interface (portB) share connections to the first NP6 processor.
Eight 1Gb SFP interfaces (port1-port8), eight RJ-45 Ethernet interfaces (port9-16) and one 10Gb SFP+ interface (portA) share connections to the second NP6 processor.

You can use the following command to display the FortiGate-900D NP6 configuration. The command output shows two NP6s named NP6_0 and NP6_1. The output also shows the interfaces (ports) connected to each NP6.

diagnose npu np6 port-list

Chip XAUI Ports Max Cross-chip

Speed offloading

------ ---- ------- ----- ----------

np6_0 0

1 port17 1G Yes

1 port18 1G Yes

1 port19 1G Yes

1 port20 1G Yes

1 port21 1G Yes

1 port22 1G Yes

1 port23 1G Yes

1 port24 1G Yes

1 port27 1G Yes

1 port28 1G Yes

1 port25 1G Yes

1 port26 1G Yes

1 port31 1G Yes

1 port32 1G Yes

1 port29 1G Yes

1 port30 1G Yes

2 portB 10G Yes

------ ---- ------- ----- ----------

np6_1 0

1 port1 1G Yes

1 port2 1G Yes

1 port3 1G Yes

1 port4 1G Yes

1 port5 1G Yes

1 port6 1G Yes

1 port7 1G Yes

1 port8 1G Yes

1 port11 1G Yes

1 port12 1G Yes

1 port9 1G Yes

1 port10 1G Yes

1 port15 1G Yes

1 port16 1G Yes

1 port13 1G Yes

1 port14 1G Yes

2 portA 10G Yes