fwaccel

Description

Controls the acceleration (SecureXL) for IPv4 traffic.

Important:

  • You must run this command in the Expert mode.
  • For information about this command, see the:

    R80.20 Performance Tuning Administration Guide >

    Chapter SecureXL and Falcon Acceleration Cards in R80.20 >

    Section SecureXL Commands and Debug >

    Section 'fwaccel' and 'fwaccel6'.

Syntax

Command

Description

fwaccel {-h | help}

Shows the built-in help.

fwaccel [-i <SecureXL ID>] off <options>

Stops the acceleration on-the-fly for all SecureXL instances or for the specified instance.

This does not survive reboot.

fwaccel conns <options>

Shows all connections that pass through SecureXL.

fwaccel dbg <options>

Controls the SecureXL Debug.

fwaccel dos

Controls the Rate Limiting for DoS Mitigation in SecureXL.

fwaccel feature <Feature-Name> {on | off}

Controls the specified SecureXL features.

fwaccel identities <options>

This command is deprecated. Do not use it.

fwaccel on <options>

Starts the acceleration on-the-fly, if it was previously stopped.

fwaccel ranges <options>

Shows the loaded ranges.

fwaccel revoked_ips <options>

This command is deprecated. Do not use it.

fwaccel stat [-a] [-t] [-v]

Shows the SecureXL status.

fwaccel stats <options>

Shows the acceleration statistics.

fwaccel synatk <options>

Controls the Accelerated SYN Defender.

fwaccel tab -t <Table-Name>

Shows the contents of the specified SecureXL table.

fwaccel templates <options>

Shows the SecureXL templates.

fwaccel ver

Shows the SecureXL and FireWall version.

Example Output - fwaccel stat

[Expert@HostName]# fwaccel stat
+-----------------------------------------------------------------------------+
|Id|Name |Status     |Interfaces               |Features                      |
+-----------------------------------------------------------------------------+
|0 |SND  |enabled    |WAN,LAN1,LAN3            |Acceleration,Cryptography     |
|  |     |           |                         |Crypto: Tunnel,UDPEncap,MD5,  |
|  |     |           |                         |SHA1,NULL,3DES,DES,CAST,      |
|  |     |           |                         |CAST-40,AES-128,AES-256,ESP,  |
|  |     |           |                         |LinkSelection,DynamicVPN,     |
|  |     |           |                         |NatTraversal,AES-XCBC,SHA256  |
+-----------------------------------------------------------------------------+

Accept Templates : enabled
Drop Templates   : disabled
NAT Templates    : enabled
[Expert@HostName]#

Example Output - fwaccel conns

[Expert@HostName]# fwaccel conns
Source          SPort Destination     DPort PR Flags           C2S i/f S2C i/f Inst PPAK ID Policy ID  CPU Held Pkts TTL/Timeout
--------------- ----- --------------- ----- -- --------------- ------- ------- ---- ------- ---------- --- --------- -----------
    192.168.1.1   443   172.30.129.96 52122  6 ...A..S..L.....     5/1     1/5    3       0 935426077   2         0   16/23
  172.30.129.96 52121     192.168.1.1   443  6 ...A..S........     5/1     1/5    1       0 935426077   0         0    6/11
  172.30.129.96 52122     192.168.1.1   443  6 ...A..S........     5/1     1/5    3       0 935426077   2         0   16/23
    192.168.1.1   443   172.30.129.96 52121  6 ...A..S..L.....     5/1     1/5    1       0 935426077   0         0    6/11

Idx Interface
--- ---------
  0 lo
  1 WAN
  3 LAN1
  4 LAN3

Total number of connections: 2
Total number of links: 2
[Expert@HostName]#

Example Output - fwaccel stats

[Expert@HostName]# fwaccel stats
Name                          Value         Name                          Value
----------------------------  ------------  ----------------------------  ------------

Accelerated Path
--------------------------------------------------------------------------------------
accel packets                        64363    accel bytes                        3261056
outbound packets                    120267    outbound bytes                     9857792
conns created                        21455    conns deleted                        21454
C total conns                            1    C TCP conns                              1
C non TCP conns                          0    nat conns                                0
dropped packets                          0    dropped bytes                            0
fragments received                       3    fragments transmit                       0
fragments dropped                        0    fragments expired                        0
IP options stripped                      0    IP options restored                      0
IP options dropped                       0    corrs created                            0
corrs deleted                            0    C corrections                            0
corrected packets                        0    corrected bytes                          0

Accelerated VPN Path
--------------------------------------------------------------------------------------
C crypt conns                            0    enc bytes                          2683456
dec bytes                          2683472    ESP enc pkts                         55904
ESP enc err                              0    ESP dec pkts                         55903
ESP dec err                              0    ESP other err                            0
espudp enc pkts                          0    espudp enc err                           0
espudp dec pkts                          0    espudp dec err                           0
espudp other err                         0

Medium Streaming Path
--------------------------------------------------------------------------------------
CPASXL packets                           0    PSLXL packets                        64363
CPASXL async packets                     0    PSLXL async packets                  64363
CPASXL bytes                             0    PSLXL bytes                        3261056
C CPASXL conns                           0    C PSLXL conns                            1
CPASXL conns created                     0    PSLXL conns created                  21455
PXL FF conns                             0    PXL FF packets                           0
PXL FF bytes                             0    PXL FF acks                              0
PXL no conn drops                        0

Inline Streaming Path
--------------------------------------------------------------------------------------
PSL Inline packets                       0    PSL Inline bytes                         0
CPAS Inline packets                      0    CPAS Inline bytes                        0

QoS Paths
--------------------------------------------------------------------------------------
QoS General Information:
------------------------
Total QoS Conns                          0    QoS Classify Conns                       0
QoS Classify flow                        0    Reclassify QoS policy                    0

FireWall QoS Path:
------------------
Enqueued IN packets                      0    Enqueued OUT packets                     0
Dequeued IN packets                      0    Dequeued OUT packets                     0
Enqueued IN bytes                        0    Enqueued OUT bytes                       0
Dequeued IN bytes                        0    Dequeued OUT bytes                       0

Accelerated QoS Path:
---------------------
Enqueued IN packets                      0    Enqueued OUT packets                     0
Dequeued IN packets                      0    Dequeued OUT packets                     0
Enqueued IN bytes                        0    Enqueued OUT bytes                       0
Dequeued IN bytes                        0    Dequeued OUT bytes                       0

Firewall Path
--------------------------------------------------------------------------------------
F2F packets                        1125520    F2F bytes                        796868434
TCP violations                           0    F2V conn match pkts                      0
F2V packets                          21455    F2V bytes                          1115656

GTP
--------------------------------------------------------------------------------------
gtp tunnels created                      0    gtp tunnels                              0
gtp accel pkts                           0    gtp f2f pkts                             0
gtp spoofed pkts                         0    gtp in gtp pkts                          0
gtp signaling pkts                       0    gtp tcpopt pkts                          0
gtp apn err pkts                         0

General
--------------------------------------------------------------------------------------
memory used                           1976    C tcp handshake conns                    1
C tcp established conns                  0    C tcp closed conns                       0
C tcp pxl handshake conns                1    C tcp pxl established conns              0
C tcp pxl closed conns                   0    outbound cpasxl packets                  0
outbound pslxl packets                   0    outbound cpasxl bytes                    0
outbound pslxl bytes                     0    DNS DoR stats                            0

(*) Statistics marked with C refer to current value, others refer to total value

[Expert@HostName]#