background image

Fast Installation and Update

Rev 1.2

7

Mellanox Technologies

2

Fast Installation and Update

This section describes the required steps only for a fast installation of Innova IPsec adapter card. 
For further details, please refer to the 

Mellanox Innova™ IPsec 4 Lx Ethernet Adapter Card User 

Manual

.

2.1

Hardware Installation 

1. Shut down your system if active.
2. After shutting down the system, turn off power and unplug the cord.
3. Place the adapter in a standard PCI Express slot. 

2.2

Content of Innova IPsec Package

Mellanox provides an Innova IPsec package which includes the following:
• FPGA image bin file

• Kernel RPM files

• Offload scripts (xfrm, iproute)

• MFT tar file

• Firmware bin files

2.3

Software, Firmware and Tools Update

 Step 1.

To download the package, please refer to 

www.mellanox.com

 => Products => Programma-

ble Adapter Cards => Innova IPsec => FW & SW.

To update the FPGA image:

 Step 1.

Locate the FPGA image bin file in the Images folder.

 Step 2.

Burn the FPGA image:

To install the most updated kernel:

 Step 1.

Locate the RPM files in the Kernel folder:

• rpm -i kernel-<kernel_version>.rpm 
• rpm -i kernel-devel-<kernel_version>.rpm

 Step 2.

Reboot your system and select the relevant kernel to load from the grub menu.

To update MFT:

 Step 1.

Untar the MFT tar file. 

Please make sure to follow the below steps in the same order. Updating the FPGA image must be 
performed first.

mlx_fpga -d /dev/mst/mt4117_pciconf0_fpga_rdma burn <fpga_image.bin>

Summary of Contents for Innova IPsec 4 Lx

Page 1: ...Mellanox Technologies www mellanox com Mellanox Innova IPsec 4 Lx Ethernet Adapter Quick Start Guide Rev 1 2...

Page 2: ...dated list of Mellanox trademarks visit http www mellanox com page trademarks NOTE THIS HARDWARE SOFTWARE OR TEST SUITE PRODUCT PRODUCT S AND ITS RELATED DOCUMENTATION ARE PROVIDED BY MELLANOX TECHNOL...

Page 3: ...irmware and Tools Update 7 Chapter 3 Test Set up Architecture 9 3 1 Tunnel Mode Set up 9 3 2 Transport Mode Set up 10 Chapter 4 Performance Test Procedure 11 4 1 Tunnel Mode 11 4 1 1 Loading Kernel an...

Page 4: ...ter 2 Fast Installation and Update on page 7 Updated Section 4 1 1 Loading Kernel and Driver on page 11 Updated Section 4 2 1 Loading Kernel and Driver on page 14 Updated Section 4 2 3 Setting up IPse...

Page 5: ...s 1 1 2 Transport Mode Table 3 lists the hardware software and firmware that the set up requires Table 2 Set up Requirements Requirements Description Hardware Four servers Four ConnectX 4 adapter card...

Page 6: ...10GbE 40GbE Driver Kernel Components kernel 4 9 0_rc6_37cc319_2017_01_22_16_06_10 1 x86_64 rpm kernel devel 4 9 0_rc6_37cc319_2017_01_22_16_06_10 1 x86_64 rpm iproute2 4 9 0rc6_ipsec_offload 1 x86_64...

Page 7: ...rnel RPM files Offload scripts xfrm iproute MFT tar file Firmware bin files 2 3 Software Firmware and Tools Update Step 1 To download the package please refer to www mellanox com Products Programma bl...

Page 8: ...rt with_fpga apps 13 mst status MST modules MST PCI module is not loaded MST PCI configuration module is not loaded MST devices No MST devices were found nor MST modules were loaded You may need to ru...

Page 9: ...both server A and B The other two servers Gateway C and Gateway D are used for IP forwarding encryption and decryption Each gateway server should have one ConnectX 4 and one Innova IPsec adapter card...

Page 10: ...ova IPsec adapter card should be installed in both Server A and Server B The IPsec configuration is set to the fol lowing Encryption algorithm AES GCM 128 256 bit key and 128 bit ICV IPsec operation m...

Page 11: ...1 Configure IP addresses for the six interfaces on the four servers root gateway c uname r kernel 4 9 0_rc6_3602b52_2016_12_06_16_08_22 root gateway c modprobe mlx_ipsec root gateway c lsmod grep mlx...

Page 12: ...4 24 dev ens1 root gateway c ifconfig ens1 192 168 8 1 24 up root gateway c ifconfig ens2 192 168 7 2 24 up root gateway d ifconfig ens2 192 168 7 9 24 up root gateway d ifconfig ens1 192 168 9 1 24...

Page 13: ...ets 0 ipsec_dec_out_packets 0 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 0 ipsec_enc_out_packets 0 ipsec_enc_bypass_packets 6 ipsec_dec_drop_packets 0 ipsec_dec_auth_fail_packets 0 ipsec_enc_drop...

Page 14: ...ect kernel version is running root gateway c ethtool S ens2 grep ipsec ipsec_dec_in_packets 8 ipsec_dec_out_packets 8 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 8 ipsec_enc_out_packets 8 ipsec_en...

Page 15: ...2768 0 mlx_accel_core 32768 1 mlx_ipsec mlx5_ib 159744 1 mlx_accel_core mlx5_core 319488 2 mlx5_ib mlx_accel_core root server a dmesg tail 5983 745124 mlx_accel_hw_dev_add_one called for 0000 00 08 0...

Page 16: ...2 root server a ethtool S ens1 grep ipsec ipsec_dec_in_packets 8 ipsec_dec_out_packets 8 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 8 ipsec_enc_out_packets 8 ipsec_enc_bypass_packets 6 ipsec_dec_...

Reviews: