3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

IPsec Configuration 163
By default, IPsec module backup function is disabled.
Configuring the fast forwarding function of the encryption card
For the packets that have the same [SourIP, SourPort, DestIP, DestPort, Prot]
quintuple, the security gateway creates a fast forwarding entry when it receives
the first packet. Then, the subsequent packets, rather than processed packet by
packet, are sent directly to the encryption card, where they are sent to the
destination after being encrypted or decrypted. This is how the fast forwarding
function of the encryption card expedites packet processing.
Perform the following configuration in system view.
By default, the fast forwarding function of the encryption card is disabled.
c
CAUTION: After the fast forwarding function is enabled on the encryption card,
no more ACL statistics will be performed on the packets fast-forwarded by the
encryption card.
Setting simple network management configuration on encryption cards
You can manage the encryption cards on the security gateway remotely by using
SNMP. With the NM function on the security gateway, you can query the card
status and monitor trap information, which includes information about card
rebooting, status transition and packet loss processing.
Perform the following configuration in system view.
By default, the trap function is not enabled on the encryption card.
Tab le 154 Configure IPsec module backup function
Operation Command
Enable IPsec module backup function encrypt-card backuped
Disable IPsec module backup function undo encrypt-card backuped
Tab le 155 Configure the fast forwarding function of the encryption card
Operation Command
Enable the fast forwarding function of the
encryption card
encrypt-card fast-switch
Disable the fast forwarding function of the
encryption card
undo encrypt-card fast-switch
Tab le 156 Configure trap function on Encryption card
Operation Command
Enable trap function on Encryption card snmp-agent trap enable encrypt-card
Disable trap function on Encryption card
undo snmp-agent trap enable
encrypt-card