Technical data

158 ServerIron ADX Firewall Load Balancing Guide
53-1002436-01
Displaying firewall group information
7
DRAFT: BROCADE CONFIDENTIAL
TCP/UDP port statistics
If you associated TCP/UDP application ports with specific firewalls (part of a stateful FWLB
configuration), rows of statistics for the application ports also are listed. The following example
shows statistics for two ServerIron ADXs in a basic stateful FWLB configuration. In this example,
HTTP traffic and Telnet traffic are explicitly associated with fw1 and fw2.
The “http” and “telnet” rows show statistics for traffic initiated by clients or servers. The “In-http”
and “In-telnet” rows show statistics for replies. In the example shown above, the statistics indicate
requests from clients outside the firewalls sent to servers on the private side of the firewalls.
In general, a ServerIron ADX will show statistics for only one direction:
• If the ServerIron ADX is on the external (Internet) side of the firewalls, the ServerIron will show
statistics in the “http” row, “telnet” row, and so on. For example, statistics for TCP SYN packets
from clients are listed in the “http” row.
• If the ServerIron ADX is on the internal (private network) side of the firewalls, the ServerIron
ADX will show statistics in the “In-http” row, “In-telnet” row, and so on. For example, server
replies to TCP SYN packets from clients are listed in the “In-http” row.
The previous example is for the external ServerIron ADX (ServerIron A). The following example
shows statistics for the internal ServerIron ADX (ServerIron ADX B).
ServerIronADXA(config)# show fw-group
Firewall-group 2 has 2 members Admin-status = Enabled Active = 0
Hash_info: Dest_mask = 255.255.255.255 Src_mask = 255.255.255.255
Firewall Server Name Admin-status Hash-distribution
fw1-IPin 6 0
fw2-IPin 6 0
Traffic From<->to Firewall Servers
Name: fw1-IPin IP: 209.157.22.3 State: 6 Groups = 2
Host->Fw-Server Fw-Server->Host
State CurConn TotConn Packets Octets Packets Octets
http active 8 37445 264015 18232357 326241 339770826
In-http active 0 0 0 0 0 0
telnet active 0 0 0 0 0 0
In-telnet active 0 0 0 0 0 0
Fw-Server active 0 0 0 0 21 2384
Total 8 37445 264015 18232357 326262 339773210
Name: fw2-IPin IP: 209.157.22.4 State: 6 Groups = 2
Host->Fw-Server Fw-Server->Host
State CurConn TotConn Packets Octets Packets Octets
http active 8 30655 216957 14977685 110028 114839282
In-http active 0 0 0 0 0 0
telnet active 0 0 0 0 0 0
In-telnet active 0 0 0 0 0 0
Fw-Server active 0 0 0 0 25 2912
Total 8 30655 216957 14977685 110053 114842194