in-path hw-assist rule
Enables the hardware TCP pass-through feature.
Syntax
[no] in-path hw-assist rule [accept | pass-through] [subnet-a <subnet-a>] [subnet-b <subnet-b>] [description "<description>"] [vlan <vlan>] [rulenum <rule-number>]
Parameters
accept | Accepts traffic for this rule. |
pass-through | Passes through traffic for this rule. |
subnet-a <subnet-a> | Specifies an IP address for the subnet that can be both source and destination together with Subnet B. Use the format XXX.XXX.XXX.XXX/XX. You can specify all or 0.0.0.0/0 as the wildcard for all traffic. |
subnet-b <subnet-b> | Specifies an IP address for the subnet that can be both source and destination together with Subnet A. Use the format XXX.XXX.XXX.XXX/XX. You can specify all or 0.0.0.0/0 as the wildcard for all traffic. |
description "<string>" | Specifies a description of the rule. The string must be in enclosed in quotes ("). |
vlan <vlan> | Specifies the VLAN identification number to set the VLAN tag ID: -1 = all, 1 = untagged, maximum = 4094 • Specify all to specify the rule applies to all VLANs. • Specify untagged to specify the rule applies to non-tagged connections. Pass-through traffic maintains any preexisting VLAN tagging between the LAN and WAN interfaces. To complete the implementation of VLAN tagging, you must set the VLAN tag IDs for the in-path interfaces that the SteelHead Interceptor uses to communicate with other SteelHead Interceptor. |
rulenum <rule-number> | Specifies the rule number to insert the pass-through load-balancing rule before. |
Usage
This feature functions only on a SteelHead or SteelHead Interceptor equipped with one or more Two-Port SR Multimode Fiber 10 Gigabit-Ethernet PCI-E or Two-Port LR Single Mode Fiber 10 Gigabit-Ethernet PCI-E cards.
Hardware Assist rules can automatically bypass all UDP (User Datagram Protocol) connections. You can also configure rules for bypassing specific TCP (Transmission Control Protocol) connections. Automatically bypassing these connections decreases the workload on the local SteelHeads because the traffic is handled directly by the hardware and bypasses the kernel.
For a hardware assist rule to be applied to a specific 10G bypass card, the corresponding in-path interface must be enabled and have an IP address.
If the system is not equipped with the necessary card, an error message displays.
To delete a rule, use the no command option as follows:
no in-path hw-assist rule rulenum <rule-number>
Example
amnesiac (config) # in-path hw-assist rule accept subnet-a 10.0.0.1/16 subnet-b 10.0.0.4/16
rulenum 1
Product
Interceptor, SteelHead CX,
Related Commands
User identity commands