Using diagnose npu np6 npu-feature to verify enabled NP6 features
You can use the diagnose npu np6 npu-feature command to see what NP6 features are enabled and which are not. The following command output shows the normal default NP6 configuration for most FortiGates. In this output all features are enabled except low latency features and GRE offloading. Low latency is only available on the FortiGate-3700D and DX models and GRE offloading will become available in a future FortiOS release. The following output is from a FortiGate-1500D
diagnose npu np6 npu-feature
np_0 np_1
——————- ——— ——— Fastpath Enabled Enabled Low-latency-mode Disabled Disabled
Low-latency-cap No No
IPv4 | firewall | Yes | Yes |
IPv6 | firewall | Yes | Yes |
IPv4 | IPSec | Yes | Yes |
IPv6 | IPSec | Yes | Yes |
IPv4 | tunnel | Yes | Yes |
IPv6 | tunnel | Yes | Yes |
GRE tunnel | No | No | |
IPv4 Multicast | Yes | Yes | |
IPv6 Multicast | Yes | Yes | |
CAPWAP | Yes | Yes |
If you use the following command to disable fastpath for np_0:
config system np6 edit np6_0
set fastpath disable end
The npu-feature command output show this configuration change:
diagnose npu np6 npu-feature
np_0 np_1
|
——————- ——— ——— Fastpath Disabled Enabled Low-latency-mode Disabled Disabled Low-latency-cap No No