np-cache (Flexible PIC Concentrator)
Syntax
np-cache;
Hierarchy Level
[edit chassis fpc fpc-slot-number]
Description
Enable session cache table on IOC.
Starting with Junos OS Release 15.1X49-D10 and and Junos OS Release 17.3R1, NP cache is supported on the SRX5K-MPC (IOC2), SRX5K-MPC3-100G10G (IOC3), and SRX5K-MPC3-40G10G (IOC3) for SRX5400, SRX5600, and SRX5800 devices.
From Junos OS Release 21.2R1, np-cache is enabled by default.
The security policy determines whether a session is for Express Path (formerly known as services offloading) mode on the selected Flexible PIC Concentrator (FPC).
The IOC2 and the IOC3 utilize the delay sessions delete mechanism. The same sessions (sessions with the same five tuples) that are deleted and then reinstalled immediately are not cached on the IOCs.
In a cluster deployment, when you configure np-cache for an IOC
card from node0, the IOC cards on both cluster nodes are activated.
To enable IPsec VPN affinity, you must also enable the
session cache on IOCs (IOC2 and IOC3) by using the set chassis
fpc <fpc-slot> np-cache command.
Options
Required Privilege Level
security—To view this in the configuration.
security-control—To add this to the configuration.
Release Information
Statement introduced in Junos OS Release 15.1X49-D10.