13-Layer 3—IP Services Command Reference

HomeSupportReference GuidesCommand ReferencesH3C SecPath Firewall Series Command Reference(V7)-6W60113-Layer 3—IP Services Command Reference
11-Multi-CPU packet distribution commands
Title Size Download
11-Multi-CPU packet distribution commands 48.57 KB

Multi-CPU packet distribution commands

forwarding policy

Use forwarding policy to specify a multi-CPU packet distribution policy.

Use undo forwarding policy to restore the default.

Syntax

forwarding policy { per-flow [ three-tuple | mode { source-ip | destination-ip | source-port | destination-port } ] | per-packet }

undo forwarding policy

Default

The device uses the flow-based policy that identifies a flow by source IP address, destination IP address, source port number, destination port number, and protocol number.

Views

System view

Predefined user roles

network-admin

context-admin

Parameters

per-flow: Specifies the flow-based forwarding. The device identifies a data flow by the five-tuple, and forwards packets of the same flow to one CPU. The CPU processes flow packets by following the first-in first-out rule.

three-tuple: Identifies a data flow by the three-tuple (source IP address, destination IP address, and protocol number). If you do not specify this keyword, the device identifies a data flow by the five-tuple.

The following compatibility matrixes show the support of hardware platforms for the three-tuple keyword:

 

F1000 series

Models

Parameter compatibility

F1000-X-G5 series

F1000-A-G5, F1000-E-G5, F1000-H-G5, F1000-S-G5

Yes

F1000-C-G5, F1000-C-G5-LI

No

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

Yes

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

No

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-9380-AI, F1000-9370-AI, F1000-910-AI, F1000-905-AI

Yes

F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI, F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI

No

F1000-C83X0 series

F1000-C8395, F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8330

Yes

F1000-C8370, F1000-C8360, F1000-C8350

No

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160

No

F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

Yes

F1000-7X0-HI series

F1000-770-HI, F1000-720-HI, F1000-710-HI, F1000-730-HI

Yes

F1000-750-HI, F1000-740-HI

No

F1000-C-X series

F1000-C-EI, F1000-C-HI, F1000-E-XI

No

F1000-C-XI

Yes

F1000-V series

F1000-E-VG

No

F1000-S-VG

Yes

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

Yes

F100 series

Models

Parameter compatibility

F100-X-G5 series

F100-A-G5, F100-C-G5, F100-M-G5, F100-S-G5

Yes

F100-E-G5

No

F100-X-G3 series

F100-A-G3, F100-E-G3

No

F100-C-G3, F100-M-G3, F100-S-G3

Yes

F100-X-G2 series

F100-A-G2, F100-E-G2

No

F100-C-G2, F100-M-G2, F100-S-G2

Yes

F100-WiNet series

F100-A80-WiNet, F100-A91-WiNet

No

F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet, F100-A81-WiNet

Yes

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1, F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

Yes

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-E-EI

No

F100-C-EI, F100-C-HI, F100-C-XI, F100-S-HI, F100-S-XI

Yes

mode: Specifies a flow-based forwarding mode.

source-ip: Identifies a flow by source IP address.

destination-ip: Identifies a flow by destination IP address.

source-port: Identifies a flow by source port.

destination-port: Identifies a flow by destination port.

The following compatibility matrixes show the support of hardware platforms for the mode keyword:

 

F1000 series

Models

Parameter compatibility

F1000-X-G5 series

F1000-A-G5, F1000-C-G5, F1000-C-G5-LI, F1000-E-G5, F1000-H-G5, F1000-S-G5

Yes

F1000-X-G3 series

F1000-A-G3, F1000-C-G3, F1000-E-G3, F1000-S-G3

Yes

F1000-X-G2 series

F1000-A-G2, F1000-C-G2, F1000-E-G2, F1000-S-G2

No

F1000-9X0-AI series

F1000-9390-AI, F1000-9385-AI, F1000-9380-AI, F1000-9370-AI, F1000-9360-AI, F1000-9350-AI, F1000-9330-AI, F1000-9320-AI, F1000-910-AI, F1000-905-AI

Yes

F1000-990-AI, F1000-980-AI, F1000-970-AI, F1000-960-AI, F1000-950-AI, F1000-930-AI, F1000-920-AI

No

F1000-C83X0 series

F1000-C8395, F1000-C8390, F1000-C8385, F1000-C8380, F1000-C8370, F1000-C8360, F1000-C8350, F1000-C8330

Yes

F1000-C81X0 series

F1000-C8180, F1000-C8170, F1000-C8160

No

F1000-C8150, F1000-C8130, F1000-C8120, F1000-C8110

Yes

F1000-7X0-HI series

F1000-770-HI, F1000-750-HI, F1000-740-HI, F1000-730-HI, F1000-720-HI, F1000-710-HI

Yes

F1000-C-X series

F1000-C-EI, F1000-C-HI, F1000-E-XI

No

F1000-C-XI

Yes

F1000-V series

F1000-E-VG

No

F1000-S-VG

Yes

SecBlade IV

LSPM6FWD8, LSQM2FWDSC8

Yes

F100 series

Models

Parameter compatibility

F100-X-G5 series

F100-A-G5, F100-C-G5, F100-E-G5, F100-M-G5, F100-S-G5

Yes

F100-X-G3 series

F100-A-G3, F100-E-G3

No

F100-C-G3, F100-M-G3, F100-S-G3

Yes

F100-X-G2 series

F100-A-G2, F100-E-G2

No

F100-C-G2, F100-M-G2, F100-S-G2

Yes

F100-WiNet series

F100-A80-WiNet

No

F100-C80-WiNet, F100-C60-WiNet, F100-C50-WiNet, F100-S80-WiNet, F100-A81-WiNet, F100-A91-WiNet

Yes

F100-C-A series

F100-C-A6, F100-C-A5, F100-C-A3, F100-C-A2, F100-C-A1, F100-C-A6-WL, F100-C-A5-W, F100-C-A3-W

Yes

F100-X-XI series

F100-A-EI, F100-A-HI, F100-A-SI, F100-E-EI

No

F100-C-EI, F100-C-HI, F100-C-XI, F100-S-HI, F100-S-XI

Yes

per-packet: Specifies the packet-based forwarding. The device forwards packets in sequence to different CPUs, even though they are the same flow. This policy does not ensure packet order.

Usage guidelines

If you do not specify any keyword for flow identification, the device identifies a flow by source IP address, destination IP address, source port number, destination port number, and protocol number.

Examples

# Specify the flow-based policy.

<Sysname> system-view

[Sysname] forwarding policy per-flow

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
All Support
  • Become a Partner
  • Partner Resources
  • Partner Business Management
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网