The firewall management-port flow force master-cpu enable command enables the function of forcibly sending traffic from the management port to the device to the master CPU (slot 11) for processing.
The undo firewall management-port flow force master-cpu enable command disables the function, and traffic from the management port to the device will be processed in hash-based board selection mode.
firewall management-port flow force master-cpu enable
undo firewall management-port flow force master-cpu enable
By default, the function of forcibly sending traffic from the management port to the device to the master CPU (slot 11) for processing is disabled.
This command is supported only by the USG6680E and USG6712E/6716E.
You are advised to enable this function only when the CPU usage is high and the management port needs to be used to manage the device. After this function is enabled, traffic sessions destined for the management port run only on core 0 of the master CPU, but the CPU performance is limited. If the service CPU is not busy, you are advised to disable this function. After this function is disabled, traffic on the management port will be hashed to other boards. In this case, the CPU performance is high.
# Enable the function of forcibly sending traffic from the management port to the device to the master CPU (slot 11) for processing.
<sysname> system-view [sysname] firewall management-port flow force master-cpu enable Warning: Firewall services may be affected. Ensure that SSH, HTTPS, Telnet, and SNMP traffic is sent to and from the MEth interface. Continue? [Y/N]: Y