Flashcards
Common Commands
Cards in this deck (20)
- 1What is the fwaccel command used for? fwaccel [on|off|stat|stats|conns|templates]dynamically enable or disable acceleration for IPv4 traffic while a Security Gateway is running. The fwaccel6 has the same functionality for IPv6 traffic. The default setting is determined by the setting configured with cpconfig. This setting reverts to the default after reboot.
- 2What is the "sim affinity" command used for? sim affinity [-a|-s|-l]Affinity is a general term for binding Network Interface Card (NIC) interrupts to processors. By default, Affinity is not set to the NIC interrupts. Therefore, each
NIC is handled by all processors
-l See Affinity settings.
-a Automatic Mode — (default) Affinity is determined by analysis of the load on each NIC. If a NIC is not activated, Affinity is not set. NIC load is analyzed every 60 seconds.
-s Manual Mode — Configure Affinity settings for each interface: the processor
numbers (separated by space) that handle this interface, or all. In Manual
Mode, periodic NIC analysis is disabled. - 3What is the command "fw ctl affinity -l -r" used for?Check which processing cores are running the kernel instances and identify the processing core to which the interfaces are directing traffic using fw ctl affinity -l -r
- 4With which command is it possible to reduce the number of Kernel instances in the SG with CoreXL enabled?Reduce the number of kernel instances using cpconfig
- 5When using the command "sim affinity" instead of the file "fwaffinity.conf" to establish the affinity of an interface?When Performance Pack is Running
If Performance Pack is running, interface affinities are handled by using the Performance Pack sim affinity command.
The default sim affinity setting is Automatic. In the Performance Pack Automatic mode, interface affinities are automatically distributed among cores that are not running kernel instances and that are not set as the affinity for any other process.
In most cases, you do not need to change the sim affinity setting.
• Setting Interface Affinities when Performance Pack is not Running If Performance Pack is not running, interface affinities are loaded at boot from a configuration text file called fwaffinity.conf, located under: $FWDIR/conf . In the text file, lines beginning with the letter i define interface affinities.
If Performance Pack is running, interface affinities are defined by sim affinity settings, and lines beginning with i in fwaffinity.conf are ignored. - 6What do the following lines inside the file "fwaffinity.conf" mean? i eth0 0 i eth1 0 i eth2 1 i default 0traffic from eth0 and eth1 go to core #0, and the traffic from
eth2 goes to core #1. "default" interfaces that are not specified in another line go to core #0 - 7What does the next line inside the file "fwaffinity.conf" mean? i default auto"default" interfaces that are not specified in another line go to any core that are not running kernel instances and that are not set as the affinity for any other process.
- 8Where is process' affinity with a processing core enabled?Affinities for Check Point daemons (such as the fwd daemon), if set, are loaded at boot from the fwaffinity.conf configuration text file located at: $FWDIR/conf
n fwd
where is the number of the processing core to be set as the affinity of the fwd daemon. - 9What is the following command used for? fw ctl affinity -l -v -aInterfaces that share an IRQ cannot have different cores as their affinities, including when one interface is included in the default affinity setting. Either set both interfaces to the same affinity, or use ignore for one of them. To view the IRQs of all interfaces, run:
fw ctl affinity -l -v -a - 10Why would you need to run the "fwaffinity_apply" script located at $FWDIR/scripts directory?Affinity settings controlled by the fwaffinity_apply script file, which executes automatically at boot.
When you make a change to affinity settings, the settings will not take effect until you either reboot or manually execute the fwaffinity_apply script.
fwaffinity_apply executes affinity definitions according to the information in the fwaffinity.conf text file. - 11What is the command "fw ctl multik stat" used for?The fw ctl multik stat and fw6 ctl multik stat (multi-kernel statistics) commands
show information for each kernel instance. The state and processing core number of each instance is displayed, along with:
• The number of connections currently being handled.
• The peak number of concurrent connections the instance has handled since its inception. - 12What is the command "fw ctl affinity" used for? fw ctl affinity -s fw ctl affinity -l [] []The fw ctl affinity command controls affinity settings. However, fw ctl affinity settings will not persist through a restart of the Security Gateway.
To set affinities, execute fw ctl affinity -s.
To list existing affinities, execute fw ctl affinity -l - 13With which command could you see the Delayed Notificactions?fwaccel stats command
indicates the number of delayed connections
fwaccel templates command
indicates the delayed time for each template - 14With which command is SecureXL enabled?cpconfig command
- 15What is the following command for? cphaprob -d -t -s [-p] registerIt registers a Critical Device
- 16What is the following command for? cphaprob -d -s reportIt reports Critical Device Status to ClusterXL
- 17What is the following command for? cphaconf set_ccp broadcast|multicastchange the CCP mode between broadcast and multicast
- 18What command is used for set interface's affinity when Performance Pack is installed?sim affinity command
- 19What file is used for set interface's affinity when Performance Pack is not installed?fwaffinity.conf file
It is located under: $FWDIR/conf
When you make a change to affinity settings, the settings will not take effect until you either reboot or manually execute the fwaffinity_apply script. This script executes affinity definitions according to the information in the fwaffinity.conf text file. fwaffinity_apply is located in the $FWDIR/scripts directory - 20If Performance Pack is installed, the does fwaffinity.conf file still set interface's affinity?If Performance Pack is running, interface affinities are defined by sim affinity settings, and lines beginning with i (interface affinity) in fwaffinity.conf are ignored.
Information
- Description
- User has deleted their subject information Flashcards on Common Commands, created by Deleted user on 29/05/2019.
- Created by
- Deleted user · May 2019
- Updated
- Jun 17, 2019
- Views
- 30
- History
-
- Created by brian gustavo triviño taborda · May 1, 2019
- Copied by brian gustavo triviño taborda · May 29, 2019
- Rating