fw ctl set

Description

Configures the specified value for the specified kernel parameter.

Notes:

Kernel parameters let you change the advanced behavior of your Security Gateway.
There are two types of kernel parameters - integer and string.
Security Gateway gets the names and the default values of the kernel parameters from these kernel module files:
- $FWDIR/modules/fw_kern_64.o
- $FWDIR/modules/fw_kern_64_v6.o
- $PPKDIR/modules/sim_kern_64.o
- $PPKDIR/modules/sim_kern_64_v6.o

Important:

In a cluster, the value of the specified kernel parameter must be the same on all members of the cluster.
In VSX Gateway, the configured values of kernel parameters apply to all existing Virtual Systems and Virtual Routers.
This configuration does not survive reboot.
To make this configuration permanent, you must edit one of the applicable configuration files:
- $FWDIR/modules/fwkern.conf
- $FWDIR/modules/vpnkern.conf
- $PPKDIR/conf/simkern.conf
For more information, see sk26202.

In addition, see the fw ctl get command.

Syntax

fw [-d] ctl set

int <Name of Integer Kernel Parameter> <Integer Value>

str <Name of String Kernel Parameter> '<String Value>'

Parameters

Parameter	Description
`-d`	Runs the command in debug mode. Use only if you troubleshoot the command itself.
`<`Name of Integer Kernel Parameter`>`	Specifies the name of the integer kernel parameter.
<Integer Value>	Specifies the integer value for the integer kernel parameter.
`<`Name of String Kernel Parameter`>`	Specifies the name of the string kernel parameter.
'<String Value>'	Specifies the string value for the string kernel parameter.

Example for an integer kernel parameter

[Expert@MyGW:0]# fw ctl get int fw_kdprintf_limit

fw_kdprintf_limit = 100

[Expert@MyGW:0]#

[Expert@MyGW:0]# fw ctl set int fw_kdprintf_limit 50

Set operation succeeded

[Expert@MyGW:0]#

[Expert@MyGW:0]# fw ctl get int fw_kdprintf_limit

fw_kdprintf_limit = 50

[Expert@MyGW:0]#

Example for a string kernel parameter

[Expert@MyGW:0]# fw ctl set str icap_unwrap_append_header_str '__print__'

Set operation succeeded

[Expert@MyGW:0]#

[Expert@MyGW:0]# fw ctl get str icap_unwrap_append_header_str

icap_unwrap_append_header_str = '__print__'

[Expert@MyGW:0]#

[Expert@MyGW:0]# fw ctl set str icap_unwrap_append_header_str ''

Set operation succeeded

[Expert@MyGW:0]#

[Expert@MyGW:0]# fw ctl get str icap_unwrap_append_header_str

icap_unwrap_append_header_str = ''

[Expert@MyGW:0]#