Login
- Table of Contents
-
- 13-Layer 3—IP Services Command Reference
- 00-Preface
- 01-IP addressing commands
- 02-IP forwarding basics commands
- 03-Fast forwarding commands
- 04-ARP commands
- 05-IPv6 basics commands
- 06-IPv6 fast forwarding commands
- 07-DHCP commands
- 08-DHCPv6 commands
- 09-DNS commands
- 10-IP performance optimization commands
- 11-Multi-CPU packet distribution commands
- 12-WAAS commands
- 13-Adjacency table commands
- 14-Web caching commands
- Related Documents
-
| Title | Size | Download |
|---|---|---|
| 11-Multi-CPU packet distribution commands | 58.92 KB |
Multi-CPU packet distribution commands
forwarding policy
Use forwarding policy to specify a multi-CPU packet distribution policy.
Use undo forwarding policy to restore the default.
Syntax
forwarding policy { per-flow [ three-tuple | mode { source-ip | destination-ip | source-port | destination-port } ] | per-packet }
undo forwarding policy
Default
The device uses the flow-based policy that identifies a flow by source IP address, destination IP address, source port number, destination port number, and protocol number.
Views
System view
Predefined user roles
network-admin
context-admin
Parameters
per-flow: Specifies the flow-based forwarding. The device identifies a data flow by the five-tuple, and forwards packets of the same flow to one CPU. The CPU processes flow packets by following the first-in first-out rule.
three-tuple: Identifies a data flow by the three-tuple (source IP address, destination IP address, and protocol number). If you do not specify this keyword, the device identifies a data flow by the five-tuple.
The following compatibility matrix shows the support of hardware platforms for the three-tuple keyword:
|
Series |
Models |
Parameter compatibility |
|
F50X0 series |
F5010, F5020, F5020-GM, F5040, F5000-C, F5000-S |
No |
|
F5030, F5030-6GW, F5060, F5080, F5000-A, F5000-M |
Yes |
|
|
F5000-CN series |
F5000-CN30, F5000-CN60 |
Yes |
|
F5000-AI series |
F5000-AI-15, F5000-AI-20, F5000-AI-40 |
Yes |
|
F5000-V series |
F5000-V30 |
Yes |
|
F1000-AI series |
F1000-AI-05, F1000-AI-10, F1000-AI-15, F1000-AI-60, F1000-AI-65, F1000-AI-70, F1000-AI-75, F1000-AI-80, F1000-AI-90 |
Yes |
|
F1000-AI-20, F1000-AI-25, F1000-AI-30, F1000-AI-35, F1000-AI-50, F1000-AI-55 |
No |
|
|
F1000-L series |
F1003-L, F1005-L, F1010-L |
Yes |
|
F10X0 series |
F1005, F1010, F1090 |
Yes |
|
F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080 |
No |
|
|
F1000-V series |
F1000-V50, F1000-V70 |
No |
|
F1000-V60, F1000-V90 |
Yes |
|
|
F1000-SASE series |
F1000-SASE100, F1000-SASE200 |
Yes |
|
F1000-AK series |
F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710, F1000-AK1010, F1000-AK1020, F1000-AK1030, F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140, F1000-AK1150, F1000-AK1160, F1000-AK1170, F1000-AK1180, F1000-AK1312, F1000-AK1322, F1000-AK1332, F1000-AK1342, F1000-AK1352, F1000-AK1362, F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614, F1000-AK9110, F1000-AK9120 |
Yes |
|
F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711, F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1242, F1000-AK1252, F1000-AK1262, F1000-AK1272 |
No |
|
|
Firewall modules |
IM-NGFWX-IV, LSPM6FWD, LSPM6FWDB, LSQM1FWDSC0, LSQM2FWDSC0, LSU3FWCEA0, LSUM1FWCEAB0, LSUM1FWDEC0, LSWM1FWD0, LSX1FWCEA1, LSXM1FWDF1 |
Yes |
|
vFW series |
vFW1000, vFW2000 |
No |
mode: Specifies a flow-based forwarding mode.
source-ip: Identifies a flow by source IP address.
destination-ip: Identifies a flow by destination IP address.
source-port: Identifies a flow by source port.
destination-port: Identifies a flow by destination port.
The following compatibility matrix shows the support of hardware platforms for the mode keyword:
|
Series |
Models |
Parameter compatibility |
|
F50X0 series |
F5010, F5020, F5020-GM, F5040, F5000-C, F5000-S |
No |
|
F5030, F5030-6GW, F5060, F5080, F5000-A, F5000-M |
Yes |
|
|
F5000-CN series |
F5000-CN30, F5000-CN60 |
Yes |
|
F5000-AI series |
F5000-AI-15, F5000-AI-20, F5000-AI-40 |
Yes |
|
F5000-V series |
F5000-V30 |
Yes |
|
F1000-AI series |
F1000-AI-05, F1000-AI-10, F1000-AI-15, F1000-AI-60, F1000-AI-65, F1000-AI-70, F1000-AI-75, F1000-AI-80, F1000-AI-90 |
Yes |
|
F1000-AI-20, F1000-AI-25, F1000-AI-30, F1000-AI-35, F1000-AI-50, F1000-AI-55 |
No |
|
|
F1000-L series |
F1003-L, F1005-L, F1010-L |
Yes |
|
F10X0 series |
F1005, F1010, F1090 |
Yes |
|
F1020, F1020-GM, F1030, F1030-GM, F1050, F1060, F1070, F1070-GM, F1070-GM-L, F1080 |
No |
|
|
F1000-V series |
F1000-V50, F1000-V70 |
No |
|
F1000-V60, F1000-V90 |
Yes |
|
|
F1000-SASE series |
F1000-SASE100, F1000-SASE200 |
Yes |
|
F1000-AK series |
F1000-AK108, F1000-AK109, F1000-AK110, F1000-AK115, F1000-AK120, F1000-AK125, F1000-AK710, F1000-AK1010, F1000-AK1020, F1000-AK1030, F1000-AK1110, F1000-AK1120, F1000-AK1130, F1000-AK1140, F1000-AK1150, F1000-AK1160, F1000-AK1170, F1000-AK1180, F1000-AK1312, F1000-AK1322, F1000-AK1332, F1000-AK1342, F1000-AK1352, F1000-AK1362, F1000-AK1414, F1000-AK1424, F1000-AK1434, F1000-AK1514, F1000-AK1524, F1000-AK1534, F1000-AK1614, F1000-AK9110, F1000-AK9210 |
Yes |
|
F1000-AK130, F1000-AK135, F1000-AK140, F1000-AK145, F1000-AK150, F1000-AK155, F1000-AK160, F1000-AK165, F1000-AK170, F1000-AK175, F1000-AK180, F1000-AK185, F1000-GM-AK370, F1000-GM-AK380, F1000-AK711, F1000-AK1212, F1000-AK1222, F1000-AK1232, F1000-AK1242, F1000-AK1252, F1000-AK1262, F1000-AK1272 |
No |
|
|
Firewall modules |
IM-NGFWX-IV, LSPM6FWD, LSPM6FWDB, LSQM1FWDSC0, LSQM2FWDSC0, LSU3FWCEA0, LSUM1FWCEAB0, LSUM1FWDEC0, LSWM1FWD0, LSX1FWCEA1, LSXM1FWDF1 |
Yes |
|
vFW series |
vFW1000, vFW2000 |
No |
per-packet: Specifies the packet-based forwarding. The device forwards packets in sequence to different CPUs, even though they are the same flow. This policy does not ensure packet order.
Usage guidelines
If you do not specify any keyword for flow identification, the device identifies a flow by source IP address, destination IP address, source port number, destination port number, and protocol number.
Examples
# Specify the flow-based policy.
<Sysname> system-view
[Sysname] forwarding policy per-flow
