Learned something new – or again?

Checking the current number of connections can be done with the command fw tab -t connections -s

Especially when you do a Full Connectivity Update in a ClusterXL environment, you need to verify that both members have nearly the same amount of connections.

When I did this in the past, I opened SSH connections to both nodes and issued the command.

That this command can be issued also on the management server to get values from both firewall nodes. Just add the target(s) as option to the command:

[Expert@fwm]# fw tab -t connections -s fw1 fw2
HOST NAME ID #VALS #PEAK #SLINKS
fw1 connections 58 137867 250322 508451
fw2 connections 8158 137560 250310 507258

Much more comfortable…