2190 CHAPTER 125: ACFP C ONFIGURATIONAs shown in Figure 639, the ACFP architecture consists of:■ Routing/switching component: As the main part of routers and switches, itperforms complete router/switcher functions and is also the core of usermanagement control.■ Independent service component: Also known as the open application platform(OAP), it is the main part open for development by a third party and is mainlyused to provide various unique service functions.Interface-connecting component: It connects the interface of therouting/switching component to that of the independent service component. Itallows the devices of two manufacturers to be interconnected.ACFP Cooperation ACFP cooperation means that the independent service component can sendinstructions to the routing/switching component to change its functions. ACFPcooperation is mainly implemented through the simple network managementprotocol (SNMP). By performing as a network management system, theindependent service component sends various SNMP commands to therouting/switching component. The routing/switching component can execute theinstructions sent because it supports SNMP agent. In this process, the cooperatingMIB is the key to associating the two components with each other.ACFP Management ACFP cooperation provides a mechanism that enables the ACFP client (namely, theindependent service component shown in Figure 639) to control the traffic on theACFP server (namely, the routing/switching component shown in Figure 639), byimplementing the following functions:■ Mirroring and redirecting the traffic on the ACFP server to the ACFP client■ Permitting/denying the traffic from the ACFP server■ Carrying the context ID in a packet to enable the ACFP server and ACFP clientto communicate the packet context with each other. The detailed procedure isas follows: The ACFP server maintains a context table that can be queried withcontext ID. Each context ID corresponds with an ACFP cooperation policy thatcontains information including inbound interface and outbound interface ofthe packet, and cooperation rules. When the packet received by the ACFPserver is redirected or mirrored to the ACFP client after matching a cooperationrule, the packet carries the context ID of the cooperation policy to which thecooperation rule belongs. When the redirected packet is returned from theACFP client, the packet also carries the context ID. With the context ID, theACFP server determines that the packet is returned after being redirected andthen forwards the packet normally.For the ACFP client to control traffic better, the two-level structure of cooperationpolicy and cooperation rules are set in the cooperation to manage the trafficmatching the cooperation rule based on the cooperation policy, achieving flexibletraffic management.For effective support of the cooperation in the client/server mode and granularand flexible rule settings, cooperation contents are divided into four parts: ACFPserver information, ACFP client information, ACFP cooperation policy, and ACFPcooperation rule, all of which are stored in the ACFP server.
