3Com Router 3000 Ethernet Family
Configuration Guide
Disable IPSec module backup function
By default, IPSec module backup function is disabled.
III. Configuring the fast forwarding function of the encryption card
For the packets that have the same [SourIP, SourPort, DestIP, DestPort, Prot] quintuple,
the router creates a fast forwarding entry when it receives the first packet. Then, the
subsequent packets, rather than processed packet by packet, are sent directly to the
encryption card, where they are sent to the destination after being encrypted or
decrypted. This is how the fast forwarding function of the encryption card expedites
packet processing.
Perform the following configuration in system view.
Table 7-26 Configure the fast forwarding function of the encryption card
Enable the fast forwarding function of the
encryption card
Disable the fast forwarding function of the
encryption card
By default, the fast forwarding function of the encryption card is disabled.
IV. Setting Simple network management configuration on encryption cards
You can manage the encryption cards on the router remotely by using SNMP. With the
NM function on the router, you can query the card status and monitor trap information,
which includes information about card rebooting, status transition and packet loss
processing.
Perform the following configuration in system view.
Table 7-27 Configure trap function on Encryption card
Enable trap function on Encryption card
Disable trap function on Encryption card
By default, the trap function is not enabled on the encryption card.
Operation
Operation
Operation
3Com Corporation
7-25
Chapter 7 IPSec Configuration
Command
undo encrypt-card backuped
Command
encrypt-card fast-switch
undo encrypt-card fast-switch
Command
snmp-agent trap enable encrypt-card
undo
snmp-agent
encrypt-card
trap
enable