cp_conf corexl

Description

Enables or disables CoreXL.

Important:

This command is for Check Point use only. To configure CoreXL, use the Check Point CoreXL option in the cpconfig menu.
After all changes in CoreXL configuration on the Security Gateway, you must reboot it.
In cluster, you must configure all the Cluster Members in the same way.

Syntax

To enable CoreXL with 'n' IPv4 FW instances and optionally 'k' IPv6 FW instances:

cp_conf corexl [-v] enable [n] [-6 k]
To disable CoreXL:

cp_conf corexl [-v] disable

See the fwboot corexl command.

Parameters

Parameter	Description
`-v`	Leaves the high memory (`vmalloc`) unchanged.
`n`	Denotes the number of IPv4 CoreXL FW instances.
`k`	Denotes the number of IPv6 CoreXL FW instances.

Example

Currently, the Security Gateway runs two IP4v CoreXL FW instances (KERN_INSTANCE_NUM = 2).

We change the number of IP4v CoreXL FW instances to three.

[Expert@MyGW:0]# fw ctl multik stat

ID | Active | CPU | Connections | Peak

----------------------------------------------

0 | Yes | 2 | 7 | 28

1 | Yes | 1 | 0 | 11

[Expert@MyGW:0]#

[Expert@MyGW:0]# cat /etc/fw.boot/boot.conf

CTL_IPFORWARDING 1

DEFAULT_FILTER_PATH 0

KERN_INSTANCE_NUM 2

COREXL_INSTALLED 1

KERN6_INSTANCE_NUM 2

IPV6_INSTALLED 0

CORE_OVERRIDE 4

[Expert@MyGW:0]#

[Expert@MyGW:0]# cp_conf corexl -v enable 3

[Expert@MyGW:0]#

[Expert@MyGW:0]# cat /etc/fw.boot/boot.conf

CTL_IPFORWARDING 1

DEFAULT_FILTER_PATH 0

KERN_INSTANCE_NUM 3

COREXL_INSTALLED 1

KERN6_INSTANCE_NUM 2

IPV6_INSTALLED 0

CORE_OVERRIDE 4

[Expert@MyGW:0]#

[Expert@MyGW:0]# reboot

.. ... ...

[Expert@MyGW:0]# fw ctl multik stat

ID | Active | CPU | Connections | Peak

----------------------------------------------

0 | Yes | 3 | 7 | 28

1 | Yes | 2 | 0 | 11

2 | Yes | 1 | 4 | 10

[Expert@MyGW:0]#