Enable Service Acceleration feature | Onboarding and Security Enablement | Cisco Smart Switches Configuration Guide for DPU Security Mode, Release 10.6(x)

Details how to enable the service acceleration feature on NX-OS switches, including powering up DPUs, command requirements, operational limitations, and considerations for configuration changes and VRF traffic redirection.

The feature service-acceleration command is used to enable the DPU security mode or the DPU functionality. When enabled, NX-OS powers up the DPUs, which takes some time. As a result, NX-OS prevents the execution of no feature service-acceleration command until the DPUs are fully powered up and reach a terminal state.

The feature service-acceleration command cannot be disabled until all DPUs in the system have been powered on. Feature service-acceleration can be re-enabled after it has been disabled, without a switch reboot.

Note

If you use the configure replace feature (refer to Performing Configuration Replace), the success of configure replace may depend on the timing of the configuration relative to when service-acceleration was enabled or disabled.

Perform this task to enable the service acceleration feature and power up the DPUs in the switch.

Procedure

Enable the feature service-acceleration command to power up the DPUs.

Example:

switch(config)# feature service-acceleration

If the feature service-acceleration command is not configured, the DPUs are powered off. The switch functions as a NXOS switch.

Note

Enabling feature service-acceleration powers up the DPUs; however, to finalize the configuration, you must define which VRFs traffic should be redirected to the DPU. See Configure traffic redirection to the firewall service.

Verify service acceleration

Perfrom this task to verify service acceleration enablement.

Procedure

Verify the service acceleration status using the show run service-acceleration | grep feature command.
Example:
```
switch# show run service-acceleration | grep feature

feature service-acceleration
```

Use the show interfaces brief command to view the status of the interfaces.

Example:

switch# show interface brief
..!
--------------------------------------------------------------------------------
Service         VLAN    Type Mode   Status  Reason                 Speed     Port
Ethernet                                                                     Ch #
--------------------------------------------------------------------------------
SEth1/1         --      eth  routed up      none                    200G(D) --
SEth1/2         --      eth  routed up      none                    200G(D) --
SEth1/3         --      eth  routed up      none                    200G(D) --
SEth1/4         --      eth  routed up      none                    200G(D) --

All DPUs power up when the feature service-acceleration is enabled.

Use the show module command to verify if the DPUs are powered up and online.

Example:

switch# show module
Mod Ports                  Module-Type                            Model           Status
--- ----- ------------------------------------------------ --------------------- --------
1    56   48x25G/2x100G/6x400G Ethernet Module             N9348Y2C6D-SE1U       ok        
27   0    Virtual Supervisor Module                        N9348Y2C6D-SE1U       active *  

Mod  Sw                       Hw    Slot
---  ----------------------- ------ ----
1    10.6(3r)                 0.1060 NA  
27   10.6(3r)                 0.1060 VSUP

Mod  MAC-Address(es)                         Serial-Num
---  --------------------------------------  ----------
1    fc-58-9a-1d-04-d4 to fc-58-9a-1d-05-b8  FDO29090ZW6
27   fc-58-9a-1d-04-d4 to fc-58-9a-1d-05-b8  FDO29090ZW6

Mod  Online Diag Status
---  ------------------
1    Pass
27   Pass

* this terminal session 
Mod DPU   Module-Type           Model         Status
--- ---  ------------- --------------------- --------
1   1    DPU           N9348Y2C6D-SE1U-DPU   ok                 
1   2    DPU           N9348Y2C6D-SE1U-DPU   ok                 

Mod DPU     Sw            Hw      Serial-Num   Online Diag Status
--- ---  ------------- ---------- ------------ ------------------
1   1     1.162.2      ES         NA           Pass
1   2     1.162.2      ES         NA           Pass

Disable service-acceleration feature

Procedure

Disable service-acceleration feature and Layer 4-7 services on the switch, for it to function in DPU powered-off state, using the using the no feature service-acceleration command.

Example:

switch(config)# no feature service-acceleration