Technical data

Chapter 9

Viewing FWLB Configuration

Details and Statistics

You can view the following FWLB configuration details and statistics:

• Firewall group information – Displays the firewall configuration, the status of each firewall, and traffic statistics

for traffic between each firewall and the ServerIron.

• Firewall path information – Shows the synchronization paths configured for the firewall.

NOTE: The information is shown from this ServerIron’s perspective. To view the other side of the path

configuration, display the firewall path information on the ServerIron at the other end of the path.

• Hashing information – Shows the firewall selected by the hashing algorithm for a given pair of source and

destination addresses.

Displaying Firewall Group Information

To display configuration information, state information, and traffic statistics for the firewall group, use the following

CLI method.

USING THE CLI

To access FWLB configuration details and statistics, enter the following command at any level of the CLI:

ServerIron(config)# show fw-group

This command shows the following information. To explain the output, this example is divided into sections for

discussion. The output is not divided in this way on the screen of your management terminal.

The first line indicates the firewall group and the number of firewalls in the group. This firewall group is group

number 2 and contains two firewalls. The second line shows the source and destination values for the hash mask.

Firewall-group 2 has 2 members Admin-status = Enabled

Hash_info: Dest_mask = 255.255.255.255 Src_mask = 255.255.255.255

The following lines list the firewalls configured in the firewall group, show the administrative state, and have

distribution values for each firewall.

• The administrative state is shown in the Admin-st column and depends on the results of the Layer 3 health

check (ping) the ServerIron performs when you add the path information for the firewall. The administrative

state can be one of the following:

• 0 – Disabled

• 1 – Enabled