fwaccel synatk -e

In the R81.10.X releases, this command is available starting from the R81.10.00 version.

Description

The "fwaccel synatk -e" and "fwaccel6 synatk -e" commands:

  • Enable the Accelerated SYN Defender on interfaces with topology "External".

  • Enable the Accelerated SYN Defender in the Monitor (Detect only) mode on interfaces with topology "Internal".

Important - In a Cluster, you must configure all the Cluster Members in the same way.

Notes:

  • This command:

    1. Modifies the default configuration file $FWDIR/conf/synatk.conf, or the configuration file specified with the "-c" parameter.

    2. Loads the modified file.

  • Output of the fwaccel synatk monitor command shows for "External" interfaces:

    • Configuration: Enforcing

    • Enforce: Prevent

    • State: Ready (may change later depending on what the SYN Defender detects)

  • Output of the fwaccel synatk monitor command shows for "Internal" interfaces:

    • Configuration: Enforcing

    • Enforce: Detect

    • State: Monitor

  • Output of the fwaccel synatk config command shows:

    • enabled 1

    • enforce 1

Syntax for IPv4

fwaccel synatk -e

Syntax for IPv6

fwaccel6 synatk -e