Mellanox Technologies Innova IPsec, Руководство пользователя

Страница: 35 / 68

IPsec Offload Software Installation and Operation
Rev 1.8 35 Mellanox Technologies
b. If using grub2, open the /boot/grub2/grub.cfg for editing and add a new menu entry for the new
installed kernel. Example of menu entry to be added (replace the vmlinuz and initramfs names with
the new kernel file names and modify the entry title as desired):
4. Once the kernel installation is complete, reboot your system and select the relevant kernel to
load from the grub menu.
5. Optional - It is also possible to change the default entry value to the index of the new entry
(the indexes are zero-based) so that the new kernel will be loaded by default. This is done by
changing the index value next to the word “default” at the beginning of the grub.conf file. For
grub2, you can use the command:
grub2-set-default.
Note:
To confirm that the required kernel version is loaded, use the "uname -r" command.
The output indicates the kernel version and name.
Note:
Installing the kernel modules will also install the following Mellanox device driver
modules - mlx5_core and mlx5_ib.
5.2.3 Installing the Customized iproute2 Utility
iproute2 is a user space utilities package that controls TCP/IP networking configuration in the
kernel. It includes commands such as:
•
ip : for management of network tables and network interfaces. It is also used to configure
packet transformation policies and the security associations (SAs) attached to those policies.
ip utility is used to set up IPsec policies on security associations.
Mellanox provides a customized iproute2 utility set which exposes new flags in the ip xfrm
utility to allow the user control of the IPsec tunnel offload state. These flags provide the option to
enable offload for IPsec SAs.
1. Obtain the customized iproute2 RPM file by contacting Mellanox support (File Name:
iproute2-<version>.x86_64.rpm)
menuentry 'Upstream 4.12.0-rc4+' --class rhel fedora --class gnu-linux --class gnu --
class os --unrestricted $menuentry_id_option 'gnulinux-4.12.0-rc4+-advanced-2d912b91-
d2e5-44fd-8040' {
load_video
set gfxpayload=keep
insmod gzio
insmod part_msdos
insmod xfs
set root='hd0,msdos1'
if [ x$feature_platform_search_hint = xy ]; then
search --no-floppy --fs-uuid --set=root --hint='hd0,msdos1' f663c5e3-1cbb-
4f88-b65e-f9848f1458c9
else
search --no-floppy --fs-uuid --set=root f663c5e3-1cbb-4f88-b65e-f9848f1458c9
fi
linux16 /vmlinuz-4.12.0-rc4+ root=/dev/sda2 console=tty0 control=ttyS0,115200n8
rhgb
initrd16 /initramfs-4.12.0-rc4+.img
}