fortios_system_npu
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Collection: fortinet.fortios
Full Name: fortinet.fortios.fortios_system_npu
Controller module — runs on the local controller, not on remote hosts.
Synopsis
Manage FortiOS configuration through native controller HTTPAPI; requires httpapi inventory and fortinet.fortios.fortios network OS
Parameters
| Name | Type | Required | Default | Description |
|---|---|---|---|---|
| access_token | str | |||
| enable_log | bool | false | ||
| member_path | str | |||
| member_state | str | |||
| system_npu | dict | |||
| vdom | str | root |
Example
yaml
- fortinet.fortios.fortios_system_npu:
system_npu:
capwap_offload: enable
dedicated_management_cpu: enable
default_qos_type: policing
dos_options:
npu_dos_meter_mode: global
npu_dos_tpe_mode: enable
double_level_mcast_offload: enable
dsw_dts_profile:
- action: wait
min_limit: "0"
profile_id: 1
step: "0"
dsw_queue_dts_profile:
- iport: eif0
name: default_name_18
oport: eif0
profile_id: "0"
queue_select: "0"
fastpath: disable
fp_anomaly:
icmp_csum_err: drop
icmp_frag: allow
icmp_land: allow
ipv4_csum_err: drop
ipv4_land: allow
ipv4_optlsrr: allow
ipv4_optrr: allow
ipv4_optsecurity: allow
ipv4_optssrr: allow
ipv4_optstream: allow
ipv4_opttimestamp: allow
ipv4_proto_err: allow
ipv4_unknopt: allow
ipv6_daddr_err: allow
ipv6_land: allow
ipv6_optendpid: allow
ipv6_opthomeaddr: allow
ipv6_optinvld: allow
ipv6_optjumbo: allow
ipv6_optnsap: allow
ipv6_optralert: allow
ipv6_opttunnel: allow
ipv6_proto_err: allow
ipv6_saddr_err: allow
ipv6_unknopt: allow
tcp_csum_err: drop
tcp_fin_noack: allow
tcp_fin_only: allow
tcp_land: allow
tcp_no_flag: allow
tcp_syn_data: allow
tcp_syn_fin: allow
tcp_winnuke: allow
udp_csum_err: drop
udp_land: allow
gtp_enhanced_cpu_range: "0"
gtp_enhanced_mode: enable
gtp_support: enable
hash_tbl_spread: enable
hpe:
all_protocol: "400000"
arp_max: "5000"
enable_shaper: disable
esp_max: "5000"
high_priority: "400000"
icmp_max: "5000"
ip_frag_max: "5000"
ip_others_max: "5000"
l2_others_max: "5000"
sctp_max: "5000"
tcp_max: "40000"
tcpfin_rst_max: "40000"
tcpsyn_ack_max: "40000"
tcpsyn_max: "40000"
udp_max: "40000"
htab_dedi_queue_nr: "4"
htab_msg_queue: data
htx_icmp_csum_chk: drop
intf_shaping_offload: enable
ip_fragment_offload: disable
ip_reassembly:
max_timeout: "200000"
min_timeout: "64"
status: disable
ipsec_inbound_cache: enable
ipsec_mtu_override: disable
ipsec_ob_np_sel: rr
ipsec_over_vlink: enable
lag_out_port_select: disable
max_receive_unit: "0"
max_session_timeout: "40"
mcast_denied_ses_offload: enable
mcast_session_accounting: tpe-based
napi_break_interval: "0"
np_queues:
ethernet_type:
- name: default_name_113
queue: "0"
weight: "15"
ip_protocol:
- name: default_name_118
protocol: "0"
queue: "0"
weight: "14"
ip_service:
- dport: "0"
name: default_name_124
protocol: "0"
queue: "0"
sport: "0"
weight: "13"
profile:
- cos0: queue0
cos1: queue0
cos2: queue0
cos3: queue0
cos4: queue0
cos5: queue0
cos6: queue0
cos7: queue0
dscp0: queue0
dscp1: queue0
dscp2: queue0
dscp3: queue0
dscp4: queue0
dscp5: queue0
dscp6: queue0
dscp7: queue0
dscp8: queue0
dscp9: queue0
dscp10: queue0
dscp11: queue0
dscp12: queue0
dscp13: queue0
dscp14: queue0
dscp15: queue0
dscp16: queue0
dscp17: queue0
dscp18: queue0
dscp19: queue0
dscp20: queue0
dscp21: queue0
dscp22: queue0
dscp23: queue0
dscp24: queue0
dscp25: queue0
dscp26: queue0
dscp27: queue0
dscp28: queue0
dscp29: queue0
dscp30: queue0
dscp31: queue0
dscp32: queue0
dscp33: queue0
dscp34: queue0
dscp35: queue0
dscp36: queue0
dscp37: queue0
dscp38: queue0
dscp39: queue0
dscp40: queue0
dscp41: queue0
dscp42: queue0
dscp43: queue0
dscp44: queue0
dscp45: queue0
dscp46: queue0
dscp47: queue0
dscp48: queue0
dscp49: queue0
dscp50: queue0
dscp51: queue0
dscp52: queue0
dscp53: queue0
dscp54: queue0
dscp55: queue0
dscp56: queue0
dscp57: queue0
dscp58: queue0
dscp59: queue0
dscp60: queue0
dscp61: queue0
dscp62: queue0
dscp63: queue0
id: "202"
type: cos
weight: "6"
scheduler:
- mode: none
name: default_name_207
npu_group_effective_scope: "255"
npu_tcam:
- data:
df: enable
dstport: "0"
ext_tag: enable
frag_off: "0"
gen_buf_cnt: "0"
gen_iv: valid
gen_l3_flags: "0"
gen_l4_flags: "0"
gen_pkt_ctrl: "0"
gen_pri: "0"
gen_pri_v: valid
gen_tv: valid
ihl: "0"
ip4_id: "0"
ip6_fl: "0"
ipver: "0"
l4_wd8: "0"
l4_wd9: "0"
l4_wd10: "0"
l4_wd11: "0"
mf: enable
protocol: "0"
slink: "0"
smac_change: enable
sp: "0"
src_cfi: enable
src_prio: "0"
src_updt: enable
srcport: "0"
svid: "0"
tcp_ack: enable
tcp_cwr: enable
tcp_ece: enable
tcp_fin: enable
tcp_push: enable
tcp_rst: enable
tcp_syn: enable
tcp_urg: enable
tgt_cfi: enable
tgt_prio: "0"
tgt_updt: enable
tgt_v: valid
tos: "0"
tp: "0"
ttl: "0"
tvid: "0"
vdid: "0"
mask:
df: enable
dstport: "0"
ext_tag: enable
frag_off: "0"
gen_buf_cnt: "0"
gen_iv: valid
gen_l3_flags: "0"
gen_l4_flags: "0"
gen_pkt_ctrl: "0"
gen_pri: "0"
gen_pri_v: valid
gen_tv: valid
ihl: "0"
ip4_id: "0"
ip6_fl: "0"
ipver: "0"
l4_wd8: "0"
l4_wd9: "0"
l4_wd10: "0"
l4_wd11: "0"
mf: enable
protocol: "0"
slink: "0"
smac_change: enable
sp: "0"
src_cfi: enable
src_prio: "0"
src_updt: enable
srcport: "0"
svid: "0"
tcp_ack: enable
tcp_cwr: enable
tcp_ece: enable
tcp_fin: enable
tcp_push: enable
tcp_rst: enable
tcp_syn: enable
tcp_urg: enable
tgt_cfi: enable
tgt_prio: "0"
tgt_updt: enable
tgt_v: valid
tos: "0"
tp: "0"
ttl: "0"
tvid: "0"
vdid: "0"
mir_act:
vlif: "0"
name: default_name_322
oid: "0"
pri_act:
priority: "0"
weight: "0"
sact:
act: "0"
act_v: enable
bmproc: "0"
bmproc_v: enable
df_lif: "0"
df_lif_v: enable
dfr: "0"
dfr_v: enable
dmac_skip: "0"
dmac_skip_v: enable
dosen: "0"
dosen_v: enable
espff_proc: "0"
espff_proc_v: enable
etype_pid: "0"
etype_pid_v: enable
frag_proc: "0"
frag_proc_v: enable
fwd: "0"
fwd_lif: "0"
fwd_lif_v: enable
fwd_tvid: "0"
fwd_tvid_v: enable
fwd_v: enable
icpen: "0"
icpen_v: enable
igmp_mld_snp: "0"
igmp_mld_snp_v: enable
learn: "0"
learn_v: enable
m_srh_ctrl: "0"
m_srh_ctrl_v: enable
mac_id: "0"
mac_id_v: enable
mss: "0"
mss_v: enable
pleen: "0"
pleen_v: enable
prio_pid: "0"
prio_pid_v: enable
promis: "0"
promis_v: enable
rfsh: "0"
rfsh_v: enable
smac_skip: "0"
smac_skip_v: enable
tp_smchk: "0"
tp_smchk_v: enable
tpe_id: "0"
tpe_id_v: enable
vdm: "0"
vdm_v: enable
vdom_id: "0"
vdom_id_v: enable
x_mode: "0"
x_mode_v: enable
tact:
act: "0"
act_v: enable
fmtuv4_s: "0"
fmtuv4_s_v: enable
fmtuv6_s: "0"
fmtuv6_s_v: enable
lnkid: "0"
lnkid_v: enable
mac_id: "0"
mac_id_v: enable
mss_t: "0"
mss_t_v: enable
mtuv4: "0"
mtuv4_v: enable
mtuv6: "0"
mtuv6_v: enable
slif_act: "0"
slif_act_v: enable
sublnkid: "0"
sublnkid_v: enable
tgtv_act: "0"
tgtv_act_v: enable
tlif_act: "0"
tlif_act_v: enable
tpeid: "0"
tpeid_v: enable
v6fe: "0"
v6fe_v: enable
vep_en: "0"
vep_en_v: enable
vep_slid: "0"
vep_slid_v: enable
xlt_lif: "0"
xlt_lif_v: enable
xlt_vid: "0"
xlt_vid_v: enable
type: L2_src_tc
vid: "0"
per_session_accounting: traffic-log-only
priority_protocol:
bfd: enable
bgp: enable
slbc: enable
qos_mode: disable
qtm_buf_mode: 6ch
rdp_offload: enable
session_acct_interval: "5"
session_denied_offload: disable
shaping_stats: disable
sse_backpressure: enable
strip_clear_text_padding: enable
strip_esp_padding: enable
sw_eh_hash:
computation: xor16
destination_ip_lower_16: include
destination_ip_upper_16: include
destination_port: include
ip_protocol: include
netmask_length: "32"
source_ip_lower_16: include
source_ip_upper_16: include
source_port: include
sw_np_bandwidth: 0G
sw_tr_hash:
draco15: enable
tcp_udp_port: include
tunnel_over_vlink: enable
uesp_offload: enable
ull_port_mode: 10G
vlan_lookup_cache: enable
vdom: root
name: Configure NPU attributes.