HP VPN Firewall Appliances Network Management Configuration Guide

328

Updating magic numbers for fast forwarding

Feature and hardware compatibility

Hardware Fast forwardin

ic number u

date com

atibilit

F1000-A-EI/F1000-S-EI Yes

F1000-E Yes

F5000 No

F5000-S/F5000-C Yes

VPN firewall modules Yes

20-Gbps VPN firewall modules Yes

Overview

After the ipffmagicnumber update command is enabled, the device decides whether a service can be

fast forwarded according to the driver registration. If the service can be fast forwarded, the device issues

the session for the service to the driver. Then the driver creates or updates a fast forwarding entry as

follows:

• If no fast forwarding entry exists, the driver creates a new entry.

• If a fast forwarding entry exists, and the magic-numbers do not change, the driver does not need to

update the forwarding entry.

• If a fast forwarding entry exists, and the magic-numbers change, the driver configures the earlier

entry as invalid, and recreates a forwarding entry.

Configuration procedure

Ste

Command

Remarks

1. Enter system view.

system-view N/A

2. Enable updating magic

numbers for fast forwarding.

ipffmagicnumber update

By default, updating magic numbers for

fast forwarding is enabled.