After reboot, the wrong interfaces are configured for Multi-Queue.

This can happen after changing the physical interfaces on the Security Gateway.

Follow one of these steps:

• Run:

  cpmq reconfigure

  reboot

• Configure the Multi-Queue again

After you configure the Multi-Queue and reboot the Security Gateway, some of the configured interfaces show as Down.

These interfaces were up before the Security Gateway reboot. The cpmq get -a command shows the interface status as Pending on.

This can happen when not enough IRQs are available on the Security Gateway.

Follow one of these steps:

• Remove unused expansion cards, if possible
• Disable some of the interfaces configured for Multi-Queue
• Manually reduce the number of active RX queues (rx_num) with the cpmq set rx_num command, and reboot the Security Gateway

When you change the status of interfaces, all the interface IRQs are assigned to CPU 0, or to all of the CPU cores.

This can happen when an interface status is changed to UP after the automatic affinity procedure runs (during each boot).

Run:

cpmq set affinity

This problem does not occur if SecureXL Affinity is set to Automatic mode (sim affinity -a).

In VSX mode, an fwk process runs on the same CPU core as some of the interface queues.

This can happen when the affinity of the Virtual System was manually changed but Multi-Queue was not reconfigured accordingly.

Follow one of these steps:

• Run:

  cpmq reconfigure

  reboot

• Configure the number of active RX queues manually

In Gateway mode, after you change the number of CoreXL Firewall instances, the Multi-Queue is disabled on all interfaces.

When you change the number of CoreXL Firewall instances, the number of active RX queues automatically changes based on this formula (if it is not configured manually):

Active RX queues = (Number of CPU cores) - (Number of CoreXL Firewall instances)

If the difference between the number of CPU cores and the number of CoreXL Firewall instances is 1, Multi-Queue is disabled.

Configure the number of active RX queues manually with this command:

cpmq set rx_num {igb | ixgbe | i40e | mlx5_core} <Value>