Troubleshooting guide

Appendix A: State Tables for VPN-1/FireWall-1 4.0 SecuRemote — client side tables

Advanced Technical Reference Guide 4.1 • June 2000 157

SPI_table table

Information about this table will be available in the next update to this document.

SecuRemote — client side tables

When running SecuRemote, the machine actually runs a minimal version of FireWall-1. Therefore the

connections are managed using the FireWall-1 state tables. The state tables below are special tables that appear

only on the SecuRemote client side.

To view the SecuRemote client side tables type:

fw tab –u

fw tab –t table_name

See the fw tab Syntax and explanation for more options.

enc_timer table

attributes: expires 1

<00000001; 1/1>

Used by SecuRemote Client: Yes.

Used by FW daemon: No.

Keys: 1

Values: None.

Timeout: 1 sec.

Comments: Used by the kernel to indicate to the daemon that some

decryption/encryption was done during the last 1 second. If such

encryption/decryption was done, an entry with a key of 1 will be inserted

into the table.

userc_topology table

The userc_topology table holds the topology of the relevant network objects (those that are inside the

encryption domains).

Example

<c7cb47e3, ffffffff; c7cb4760>

<c0a81e16, ffffffff; c7cb4760>

The userc_topology table uses the following format: