1 lutego 2019

npu

Diagnose npu np4 ddr

Firmware – FortiOS: 5.4
This command is used to debug NP4 DDR settings.

Syntax
diagnose npu np4 ddr
diagnose npu np4 dqs-write
diagnose npu np4 dqs-read
diagnose npu np4 crps-write
diagnose npu np4 crps-read


diagnose npu np6

Firmware – FortiOS: 5.2 5.6 6.0
The following diag npc np6 commands have been reintroduced into 5.6.0. These options were available in 5.2.x but were not in 5.4.0

Syntax
diagnose npu np6 gmac-stats – Shows the GMAC MIBs counters
diagnose npu np6 gmac-stats-clear – Clears the GMAC MIBS counters
diagnose npu np6 gige-port-stats – Shows the GIGE PORT MIBs counters
diagnose npu np6 gige-port-stats-clear – Clears the GIGE PORT MIBs counters
diagnose npu np6 npu-feature – Display the status of NP6 features on your FortiGate.

Example
npu-feature

diagnose npu np6 npu-feature
np_0 np_1
——————- ——— ———
Fastpath Enabled Enabled
HPE-type-shaping Disabled Disabled
Standalone No No
IPv4 firewall Yes Yes
IPv6 firewall Yes Yes
IPv4 IPSec Yes Yes
IPv6 IPSec Yes Yes
IPv4 tunnel Yes Yes
IPv6 tunnel Yes Yes
GRE tunnel No No
GRE passthrough Yes Yes
IPv4 Multicast Yes Yes
IPv6 Multicast Yes Yes
CAPWAP Yes Yes
RDP Offload Yes Yes

If you use the following setting to disable fastpath:

config system npu
set fastpath disable
end

The npu-feature command output shows this configuration change:

diagnose npu np6 npu-feature
np_0 np_1
——————- ——— ———
Fastpath Disabled Disabled
HPE-type-shaping Disabled Disabled
Standalone No No
IPv4 firewall Yes Yes
IPv6 firewall Yes Yes
IPv4 IPSec Yes Yes
IPv6 IPSec Yes Yes
IPv4 tunnel Yes Yes
IPv6 tunnel Yes Yes
GRE tunnel No No
GRE passthrough Yes Yes
IPv4 Multicast Yes Yes
IPv6 Multicast Yes Yes
CAPWAP Yes Yes
RDP Offload Yes Yes



Diagnose npu np6lite

Firmware – FortiOS: 5.6.3 6.0
You can use the diagnose npu np6lite npu-feature command to see the NP6Lite features that are enabled on your FortiGate and those that are not.

Syntax
diagnose npu np6 npu-feature – Display the status of NP6Lite features on your FortiGate.

Example
npu-feature
The following command output shows the normal default NP6Lite configuration for most FortiGates with NP6Lite processors. The following output is from a FortiGate-200E:

diagnose npu np6 npu-feature
np_0 np_1
——————- ——— ———
Fastpath Enabled Enabled
IPv4 firewall Yes Yes
IPv6 firewall Yes Yes
IPv4 IPSec Yes Yes
IPv6 IPSec Yes Yes
IPv4 tunnel Yes Yes
IPv6 tunnel Yes Yes
GRE tunnel No No

If you use the following setting to disable fastpath:

config system npu
set fastpath disable
end

The npu-feature command output show this configuration change:

diagnose npu np6 npu-feature
np_0 np_1
——————- ——— ———
Fastpath Disabled Disabled
IPv4 firewall Yes Yes
IPv6 firewall Yes Yes
IPv4 IPSec Yes Yes
IPv6 IPSec Yes Yes
IPv4 tunnel Yes Yes
IPv6 tunnel Yes Yes
GRE tunnel No No