Print Download PDF Send Feedback

Previous

Next

'fwaccel stat' and 'fwaccel6 stat'

Description

These commands show the SecureXL status, the list of the accelerated interfaces and the list of the accelerated features on the local Security Gateway, or Cluster Member.

Syntax for IPv4

fwaccel [-i <SecureXL ID>] stat [-a] [-t] [-v]

Syntax for IPv6

fwaccel6 stat [-a] [-t] [-v]

Parameters

Parameter

Description

-i <SecureXL ID>

Specifies the SecureXL instance ID (for IPv4 only).

No Parameters

Shows this information:

  • SecureXL instance ID
  • SecureXL instance role
  • SecureXL status
  • Accelerated interfaces
  • Accelerated features

In addition, also shows:

  • More information about the Cryptography feature
  • The status of Accept Templates
  • The status of Drop Templates
  • The status of NAT Templates

-a

On VSX Gateway, shows the information for all Virtual Systems.

-t

Shows this information only:

  • SecureXL instance ID
  • SecureXL instance role
  • SecureXL status
  • Accelerated interfaces
  • Accelerated features

-v

On VSX Gateway, shows the information for all Virtual Systems.

The same as the "-a" parameter.

Example 1 - Full output from a non-VSX Gateway

[Expert@MyGW:0]# fwaccel stat

+-----------------------------------------------------------------------------+

|Id|Name |Status |Interfaces |Features |

+-----------------------------------------------------------------------------+

|0 |SND |enabled |eth0,eth1,eth2,eth3,eth4,|

| | | |eth5,eth6 |Acceleration,Cryptography |

| | | | |Crypto: Tunnel,UDPEncap,MD5, |

| | | | |SHA1,NULL,3DES,DES,CAST, |

| | | | |CAST-40,AES-128,AES-256,ESP, |

| | | | |LinkSelection,DynamicVPN, |

| | | | |NatTraversal,AES-XCBC,SHA256 |

+-----------------------------------------------------------------------------+

 

Accept Templates : disabled by Firewall

Layer MyGW_Policy Network disables template offloads from rule #1

Throughput acceleration still enabled.

Drop Templates : disabled

NAT Templates : disabled by Firewall

Layer MyGW_Policy Network disables template offloads from rule #1

Throughput acceleration still enabled.

[Expert@MyGW:0]#

Example 2 - Brief output from a non-VSX Gateway

[Expert@MyGW:0]# fwaccel stat -t

+-----------------------------------------------------------------------------+

|Id|Name |Status |Interfaces |Features |

+-----------------------------------------------------------------------------+

|0 |SND |enabled |eth0,eth1,eth2,eth3,eth4,|

| | | |eth5,eth6,eth7 |Acceleration,Cryptography |

+-----------------------------------------------------------------------------+

 

[Expert@MyGW:0]#

Example 3 - Full output from a VSX Gateway

[Expert@MyVSXGW:1]# vsx stat -v

VSX Gateway Status

==================

Name: VSX2_192.168.3.242

Access Control Policy: VSX_GW_VSX

Installed at: 17Sep2018 13:17:14

Threat Prevention Policy: <No Policy>

SIC Status: Trust

 

Number of Virtual Systems allowed by license: 25

Virtual Systems [active / configured]: 2 / 2

Virtual Routers and Switches [active / configured]: 0 / 0

Total connections [current / limit]: 4 / 44700

 

Virtual Devices Status

======================

 

ID | Type & Name | Access Control Policy | Installed at | Threat Prevention Policy | SIC Stat

-----+---------------------+-----------------------+-----------------+--------------------------+---------

1 | S VS1 | VS1_Policy | 17Sep2018 12:47 | <No Policy> | Trust

2 | S VS2 | VS2_Policy | 17Sep2018 12:47 | <No Policy> | Trust

 

Type: S - Virtual System, B - Virtual System in Bridge mode,

R - Virtual Router, W - Virtual Switch.

 

[Expert@MyVSXGW:1]#

[Expert@MyVSXGW:1]# vsenv 1

Context is set to Virtual Device VS1 (ID 1).

[Expert@MyVSXGW:1]#

[Expert@MyVSXGW:1]# fwaccel stat

+-----------------------------------------------------------------------------+

|Id|Name |Status |Interfaces |Features |

+-----------------------------------------------------------------------------+

|0 |SND |enabled |eth1,eth2,eth3 |Acceleration,Cryptography |

| | | | |Crypto: Tunnel,UDPEncap,MD5, |

| | | | |SHA1,NULL,3DES,DES,CAST, |

| | | | |CAST-40,AES-128,AES-256,ESP, |

| | | | |LinkSelection,DynamicVPN, |

| | | | |NatTraversal,AES-XCBC,SHA256 |

+-----------------------------------------------------------------------------+

 

Accept Templates : disabled by Firewall

Layer VS1_Policy Network disables template offloads from rule #1

Throughput acceleration still enabled.

Drop Templates : disabled

NAT Templates : disabled by Firewall

Layer VS1_Policy Network disables template offloads from rule #1

Throughput acceleration still enabled.

[Expert@MyVSXGW:1]#