fwaccel stat

Description

The fwaccel stat and fwaccel6 stat commands show the SecureXLClosed Check Point product on a Security Gateway that accelerates IPv4 and IPv6 traffic that passes through a Security Gateway. status, the list of the accelerated interfaces and the list of the accelerated features on the local Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources., or Cluster MemberClosed Security Gateway that is part of a cluster..

Syntax for IPv4

fwaccel stat [-a] [-t] [-v]

Syntax for IPv6

fwaccel6 stat [-a] [-t] [-v]

Parameters

Parameter

Description

No Parameters

Shows this information:

  • SecureXL instance ID

  • SecureXL instance role

  • SecureXL status

  • Accelerated interfaces

  • Accelerated features

In addition, also shows:

  • More information about the Cryptography feature

  • The status of Accept Templates

  • The status of Drop Templates

  • The status of NAT Templates

-a

On a VSX GatewayClosed Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0., shows the information for all Virtual Systems.

-t

Shows this information only:

  • SecureXL instance ID

  • SecureXL instance role

  • SecureXL status

  • Accelerated interfaces

  • Accelerated features

-v

On a VSXClosed Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. Gateway, shows the information for all Virtual Systems.

The same as the "-a" parameter.

Example 1 - Full output from a non-VSX Gateway

[Expert@MyGW:0]# fwaccel stat
+-----------------------------------------------------------------------------+
|Id|Name |Status     |Interfaces               |Features                      |
+-----------------------------------------------------------------------------+
|0 |SND  |enabled    |eth0,eth1,eth2,eth3,eth4,|
|  |     |           |eth5,eth6                |Acceleration,Cryptography     |
|  |     |           |                         |Crypto: Tunnel,UDPEncap,MD5,  |
|  |     |           |                         |SHA1,NULL,3DES,DES,CAST,      |
|  |     |           |                         |CAST-40,AES-128,AES-256,ESP,  |
|  |     |           |                         |LinkSelection,DynamicVPN,     |
|  |     |           |                         |NatTraversal,AES-XCBC,SHA256  |
+-----------------------------------------------------------------------------+
 
Accept Templates : disabled by Firewall
                   Layer MyGW_Policy Network disables template offloads from rule #1
                   Throughput acceleration still enabled.
Drop Templates   : disabled
NAT Templates    : disabled by Firewall
                   Layer MyGW_Policy Network disables template offloads from rule #1
                   Throughput acceleration still enabled.
[Expert@MyGW:0]#

Example 2 - Brief output from a non-VSX Gateway

[Expert@MyGW:0]# fwaccel stat -t
+-----------------------------------------------------------------------------+
|Id|Name |Status     |Interfaces               |Features                      |
+-----------------------------------------------------------------------------+
|0 |SND  |enabled    |eth0,eth1,eth2,eth3,eth4,|
|  |     |           |eth5,eth6,eth7           |Acceleration,Cryptography     |
+-----------------------------------------------------------------------------+
 
[Expert@MyGW:0]#

Example 3 - Full output from a VSX Gateway

[Expert@MyVSXGW:1]# vsx stat -v
VSX Gateway Status
==================
Name:            VSX2_192.168.3.242
Access Control Policy: VSX_GW_VSX
Installed at:    17Sep2018 13:17:14
Threat Prevention Policy: <No Policy> 
SIC Status:      Trust
 
Number of Virtual Systems allowed by license:          25
Virtual Systems [active / configured]:                  2 / 2
Virtual Routers and Switches [active / configured]:     0 / 0
Total connections [current / limit]:                    4 / 44700
 
Virtual Devices Status
======================
 
 ID  | Type & Name         | Access Control Policy | Installed at    | Threat Prevention Policy | SIC Stat
-----+---------------------+-----------------------+-----------------+--------------------------+---------
   1 | S VS1               | VS1_Policy            | 17Sep2018 12:47 | <No Policy>              | Trust
   2 | S VS2               | VS2_Policy            | 17Sep2018 12:47 | <No Policy>              | Trust
 
Type: S - Virtual System, B - Virtual System in Bridge mode,
      R - Virtual Router, W - Virtual Switch.
 
[Expert@MyVSXGW:1]#
[Expert@MyVSXGW:1]# vsenv 1
Context is set to Virtual Device VS1 (ID 1).
[Expert@MyVSXGW:1]#
[Expert@MyVSXGW:1]# fwaccel stat
+-----------------------------------------------------------------------------+
|Id|Name |Status     |Interfaces               |Features                      |
+-----------------------------------------------------------------------------+
|0 |SND  |enabled    |eth1,eth2,eth3           |Acceleration,Cryptography     |
|  |     |           |                         |Crypto: Tunnel,UDPEncap,MD5,  |
|  |     |           |                         |SHA1,NULL,3DES,DES,CAST,      |
|  |     |           |                         |CAST-40,AES-128,AES-256,ESP,  |
|  |     |           |                         |LinkSelection,DynamicVPN,     |
|  |     |           |                         |NatTraversal,AES-XCBC,SHA256  |
+-----------------------------------------------------------------------------+
 
Accept Templates : disabled by Firewall
                   Layer VS1_Policy Network disables template offloads from rule #1
                   Throughput acceleration still enabled.
Drop Templates   : disabled
NAT Templates    : disabled by Firewall
                   Layer VS1_Policy Network disables template offloads from rule #1
                   Throughput acceleration still enabled.
[Expert@MyVSXGW:1]#