fwaccel synatk -g

In the R81.10.X releases, this command is available starting from the R81.10.00 version.

Description

The "fwaccel synatk -g" and "fwaccel6 synatk -g" commands enable the Accelerated SYN Defender on all interfaces.

Important - In a Cluster, you must configure all the Cluster Members in the same way.

Notes:

  • This command:

    1. Modifies the default configuration file $FWDIR/conf/synatk.conf, or the configuration file specified with the "-c" parameter.

    2. Loads the modified file.

  • Output of the fwaccel synatk monitor command shows for "External" interfaces:

    • Configuration: Enforcing

    • Enforce: Prevent

    • State: Ready (may change later depending on what the SYN Defender detects)

  • Output of the fwaccel synatk monitor command shows for "Internal" interfaces:

    • Configuration: Enforcing

    • Enforce: Detect

    • State: Monitor

  • Output of the fwaccel synatk config command shows:

    • enabled 1

    • enforce 2

Syntax for IPv4

fwaccel synatk -g

Syntax for IPv6

fwaccel6 synatk -g