fw ctl multik get_instance

Description

Shows CoreXLClosed Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores. Firewall instance that processes the specified IPv4 connection.

Important - This command works only if the CoreXL Dynamic Dispatcher is disabled (see sk105261).

Syntax

  • To show the CoreXL Firewall instance that processes the specified IPv4 connection:

    fw ctl multik get_instance sip=<Source IPv4 Address> dip=<Destination IPv4 Address> proto=<Protocol Number>

  • To show the CoreXL Firewall instance that processes the specified range of IPv4 connections:

    fw ctl multik get_instance sip=<Source IPv4 Address Start> - <Source IPv4 Address End> dip=<Destination IPv4 Address Start> - <Destination IPv4 Address End> proto=<Protocol Number>

Parameters

Parameter

Description

<Source IPv4 Address>

Source IPv4 address of the specified connection

<Source IPv4 Address Start>

First source IPv4 address of the specified range of IPv4 addresses

<Source IPv4 Address End>

Last source IPv4 address of the specified range of IPv4 addresses

<Destination IPv4 Address>

Destination IPv4 address of the specified connection

<Destination IPv4 Address Start>

First destination IPv4 address of the specified range of IPv4 addresses

<Destination IPv4 Address End>

Last destination IPv4 address of the specified range of IPv4 addresses

<Protocol Number>

See IANA Protocol Numbers.

For example:

  • 1 = ICMP

  • 6 = TCP

  • 17 = UDP

Example for a specified IPv4 connection

[Expert@MyGW:0]# fw ctl multik get_instance sip=192.168.2.3 dip=172.30.241.66 proto=6
protocol: 6
192.168.2.3 -> 172.30.241.66 => 3
[Expert@MyGW:0]#

Example for a specified range of IPv4 connections

[Expert@MyGW:0]# fw ctl multik get_instance sip=192.168.2.3-192.168.2.8 dip=172.30.241.66 proto=6
protocol: 6
192.168.2.3 -> 172.30.241.66 => 3
192.168.2.4 -> 172.30.241.66 => 0
192.168.2.5 -> 172.30.241.66 => 3
192.168.2.6 -> 172.30.241.66 => 5
192.168.2.7 -> 172.30.241.66 => 4
192.168.2.8 -> 172.30.241.66 => 5
[Expert@MyGW:0]#