13-Layer 3—IP Services Configuration Guide

HomeSupportSecurityH3C SecPath F100-C-A FirewallConfigure & DeployConfiguration GuidesH3C SecPath F100[F1000] Firewalls Series Configuration Guides(V7)-6W90013-Layer 3—IP Services Configuration Guide
11-Multi-CPU packet distribution configuration
Title Size Download
11-Multi-CPU packet distribution configuration 51.72 KB

Configuring multi-CPU packet distribution

About multi-CPU packet distribution

On a multi-CPU device, packets can be distributed among CPUs based on one of the following policies:

·     Flow-based policy—Forwards packets of a flow to one CPU or multiple CPUs. The CPU processes flow packets by following the first-in first-out rule. The device supports using the source IP address, destination IP address, source port number, destination port number, and protocol number to identify a flow.

·     Packet-based policy—Forwards packets in sequence to different CPUs, even though they are the same flow. This policy does not ensure packet order.

Restrictions: Hardware compatibility with multi-CPU packet distribution

F1000 series

Models

Multi-CPU packet distribution compatibility

F1000-X-G5 series

F1000-A-G5, F1000-S-G5

Yes

F1000-C-G5, F1000-C-G5-LI

No

F1000-E-G5, F1000-H-G5

Yes

F1000-X-XI series

F1000-E-X

No

 

F100 series

Models

Multi-CPU packet distribution compatibility

F100-X-G5 series

F100-A-G5

Yes

F100-E-G5

No

F100-C-G5, F100-M-G5, F100-S-G5

Yes

F100-C-A series

F100-C-A2, F100-C-A1

No

F100-X-XI series

F100-A-XI

No

F100-C-XI, F100-S-XI

Yes

Restrictions and guidelines: Multi-CPU packet distribution configuration

If a service requires packets of a flow to be received by the same CPU, you must use the flow-based policy.

Specifying a packet distribution policy

1.     Enter system view.

system-view

2.     Specify a packet distribution policy.

forwarding policy { per-flow [ three-tuple | mode { source-ip | destination-ip | source-port | destination-port } ] | per-packet }

By default, the device uses the flow-based policy that identifies a flow by source IP address, destination IP address, source port number, destination port number, and protocol number.

 

  • Cloud & AI
  • InterConnect
  • Intelligent Computing
  • Intelligent Storage
  • Security
  • SMB Products
  • Intelligent Terminal Products
  • Product Support Services
  • Technical Service Solutions
All Services
  • Resource Center
  • Policy
  • Online Help
  • Technical Blogs
All Support
  • Become A Partner
  • Partner Policy & Program
  • Global Learning
  • Partner Sales Resources
  • Partner Business Management
  • Service Business
All Partners
  • Profile
  • News & Events
  • Online Exhibition Center
  • Contact Us
All About Us
新华三官网