Understanding the Configuration File List

The xfer_file_list file contains pointers to the related configuration files on an SGM. Each record defines the path to a configuration file, followed by the action to take if the imported file is different from the local file. This table shows an example of the record structure.

The context field defines the type of configuration file:

• global_context - Security Gateway configuration file
• all_vs_context - Virtual Systems configuration file

The action field defines that action to be taken when the imported (copied) file is different that the local file:

• /bin/true - Reboot is required
• /bin/false - No reboot is required
• String enclosed in double quotes - Name of a "callback script" that selects the applicable action.

Example of a configuration file list:

global_context $PPKDIR/boot/modules/sim_aff.conf "sim affinityload"

global_context $PPKDIR/boot/modules/simkern.conf /bin/false

global_context $FWDIR/modules/fwkern.conf /bin/false

all_vs_context $FWDIR/conf/fwauthd.conf /bin/false

all_vs_context $FWDIR/conf/discntd.if /bin/false

global_context /var/opt/fw.boot/ha_boot.conf /bin/false

all_vs_context $FWDIR/conf/sync_exceptions_tab "g_sync_exception -f"

all_vs_context $FWDIR/bin/reserved_conns_tab "g_reserved_conns -f"

global_context /config/active  /usr/bin/confd_clone /config/db/cloned_db

global_context /tmp/sms_rate_limit.tmp /bin/true

global_context /tmp/sms_history.tmp /bin/true

global_context /home/admin/.ssh/known_hosts /bin/true

global_context /etc/passwd /bin/true

global_context /etc/shadow /bin/true

global_context /etc/smd_user.conf "smd restart"

global_context /etc/smd_admin.conf "smd restart"

all_vs_context $FWDIR/bin/iproute.load /bin/true

all_vs_context $FWDIR/conf/gre_loader.conf /bin/true

global_context $FWDIR/conf/fwha_ch_uptime /bin/true

global_context $FWDIR/modules/mq_aff.conf "mq_affinity -s"

global_context $FWDIR/conf/pingable_hosts.conf "pingable_hosts local on"

all_vs_context $FWDIR/conf/pingable_hosts.ips /bin/true

global_context $FWDIR/conf/alert.conf /bin/true

all_vs_context $FWDIR/conf/asg_log_servers.conf "log_servers_util refresh"

global_context $FWDIR/modules/vlan_mq.conf "vlan_perf_enhancement -c"

global_context $FWDIR/conf/fw_global_params.conf "cpha_blade_config fw_global_params_changed"

global_context $FWDIR/boot/mq.conf "cpmq reconfigure"

global_context /etc/modprobe.conf asg_update_modprobe_conf /tmp/modprobe.conf.new

global_context $FWDIR/boot/modules/vpnkern.conf /bin/false

global_context /etc/ssm_port_speed.conf /bin/asg_update_port_speed /tmp/ssm_port_speed.conf.new

all_vs_context $FWDIR/conf/selective_template_exclude.conf /bin/true

global_context /etc/syslog_servers_list.conf asg_syslog_helper

global_context $FWDIR/conf/vsaffinity_exception.conf /bin/false

all_vs_context $FWDIR/conf/manual.affinity.conf "check_smo_affinity_files manual"

global_context $FWDIR/conf/fwkall.affinity.conf "check_smo_affinity_files fwdir" $FWDIR/tmp/

all_vs_context $CPDIR/conf/*.affinity.conf "check_smo_affinity_files cpdir" $CPDIR/tmp/

global_context $FWDIR/conf/resctrl "$FWDIR/bin/fw vsx resctrl load_configuration"