fw ctl chain

Description

Shows the list of Firewall Chain Modules.

This list shows various inspection Chain Modules, through which the traffic passes on this Security Gateway.

The available Chain Modules depend on the configuration and enabled Software Blades.

Important - In a cluster, these lists must be the same on all members of the cluster.

Syntax

fw [-d] ctl chain

Parameters

Parameter	Description
`-d`	Runs the command in debug mode. Use only if you troubleshoot the command itself.

Example

[Expert@MyGW:0]# fw ctl chain

in chain (23):

0: -7fffffff (0000000000000000) (00000000) SecureXL inbound (sxl_in)

1: -7ffffffe (0000000000000000) (00000000) SecureXL inbound CT (sxl_ct)

2: -7f800000 (ffffffff8b6812b0) (ffffffff) IP Options Strip (in) (ipopt_strip)

3: -7d000000 (ffffffff8a96ee80) (00000003) vpn multik forward in

4: - 2000000 (ffffffff8a97d830) (00000003) vpn decrypt (vpn)

5: - 1fffffa (ffffffff8a9533a0) (00000001) l2tp inbound (l2tp)

6: - 1fffff8 (ffffffff8b67f0e0) (00000001) Stateless verifications (in) (asm)

7: - 1fffff7 (ffffffff8b67ec00) (00000001) fw multik misc proto forwarding

8: - 1fffff2 (ffffffff8a982aa0) (00000003) vpn tagging inbound (tagging)

9: - 1fffff0 (ffffffff8a983460) (00000003) vpn decrypt verify (vpn_ver)

10: 0 (ffffffff8b85a950) (00000001) fw VM inbound (fw)

11: 1 (ffffffff8a97ed70) (00000003) vpn policy inbound (vpn_pol)

12: 2 (ffffffff8b681700) (00000001) fw SCV inbound (scv)

13: 3 (ffffffff8a982130) (00000003) vpn before offload (vpn_in)

14: 4 (ffffffff8b0fa5c0) (00000003) QoS inbound offload chain module

15: 5 (ffffffff8b574730) (00000003) fw offload inbound (offload_in)

16: 10 (ffffffff8b84c9c0) (00000001) fw post VM inbound (post_vm)

17: 100000 (ffffffff8b807970) (00000001) fw accounting inbound (acct)

18: 22000000 (ffffffff8b0fbfc0) (00000003) QoS slowpath inbound chain mod (fg_sched)

19: 7f730000 (ffffffff8b3d3aa0) (00000001) passive streaming (in) (pass_str)

20: 7f750000 (ffffffff8b17dff0) (00000001) TCP streaming (in) (cpas)

21: 7f800000 (ffffffff8b681260) (ffffffff) IP Options Restore (in) (ipopt_res)

22: 7fb00000 (ffffffff8a9fe8a0) (00000001) Cluster Late Correction (ha_for)

out chain (19):

0: -7f800000 (ffffffff8b6812b0) (ffffffff) IP Options Strip (out) (ipopt_strip)

1: -78000000 (ffffffff8a96ee60) (00000003) vpn multik forward out

2: - 1ffffff (ffffffff8a97fb70) (00000003) vpn nat outbound (vpn_nat)

3: - 1fffff0 (ffffffff8b168640) (00000001) TCP streaming (out) (cpas)

4: - 1ffff50 (ffffffff8b3d3aa0) (00000001) passive streaming (out) (pass_str)

5: - 1ff0000 (ffffffff8a982aa0) (00000003) vpn tagging outbound (tagging)

6: - 1f00000 (ffffffff8b67f0e0) (00000001) Stateless verifications (out) (asm)

7: 0 (ffffffff8b85a950) (00000001) fw VM outbound (fw)

8: 10 (ffffffff8b84c9c0) (00000001) fw post VM outbound (post_vm)

9: 2000000 (ffffffff8a982900) (00000003) vpn policy outbound (vpn_pol)

10: 15000000 (ffffffff8b0fac30) (00000003) QoS outbound offload chain modul (fg_pol)

11: 1ffffff0 (ffffffff8a951790) (00000001) l2tp outbound (l2tp)

12: 20000000 (ffffffff8a978280) (00000003) vpn encrypt (vpn)

13: 21000000 (ffffffff8b0fbfc0) (00000003) QoS slowpath outbound chain mod (fg_sched)

14: 7f000000 (ffffffff8b807970) (00000001) fw accounting outbound (acct)

15: 7f700000 (ffffffff8b17cb10) (00000001) TCP streaming post VM (cpas)

16: 7f800000 (ffffffff8b681260) (ffffffff) IP Options Restore (out) (ipopt_res)

17: 7f900000 (0000000000000000) (00000000) SecureXL outbound (sxl_out)

18: 7fa00000 (0000000000000000) (00000000) SecureXL deliver (sxl_deliver)

[Expert@MyGW:0]#