.. _cgnv6_stateful_firewall_global:

cgnv6 stateful-firewall global
==============================

Stateful Firewall Configuration (default:disabled)


global Specification
--------------------

	===================================== =======================================================================
	===================================== =======================================================================
	 **Type**                              *Configuration Resource*

	 **Element Name**                      global

	 **Element URI**                       /axapi/v3/cgnv6/stateful-firewall/global

	 **Element Attributes**                global_attributes

	 **Statistics Data URI**               /axapi/v3/cgnv6/stateful-firewall/global/stats

	 **Schema**                             :download:`global schema <cgnv6-stateful-firewall-global/cgnv6-stateful-firewall-global.txt>`
	===================================== =======================================================================





	**Operations Allowed:**




.. raw:: html

   <script type="text/javascript">
 function showExample(a,b) { document.getElementById(a+'_div').style.display = 'block'; document.getElementById(a+'_cl').style.display = 'block'; document.getElementById(a+'_eg').style.display = 'none';}
   function closeExample(a,b) { document.getElementById(a+'_div').style.display = 'none'; document.getElementById(a+'_cl').style.display = 'none'; document.getElementById(a+'_eg').style.display = 'block';}
 </script>
   <table width='90%' style='margin-left:5%'>



.. raw:: html

   <tr style='border-bottom: thin solid; border-top: thin solid'><th width=15%>Operation</th><th width=10%>Method</th><th>URI</th><th width=15%>Payload</th><th width=10%></th></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Create Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/cgnv6/stateful-firewall/global



.. raw:: html

   </td><td valign = 'top'>


:ref:`378_global_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Get Object



.. raw:: html

   </td><td valign = 'top'>


GET



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/cgnv6/stateful-firewall/global



.. raw:: html

   </td><td valign = 'top'>


:ref:`378_global_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Modify Object



.. raw:: html

   </td><td valign = 'top'>


POST



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/cgnv6/stateful-firewall/global



.. raw:: html

   </td><td valign = 'top'>


:ref:`378_global_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Replace Object



.. raw:: html

   </td><td valign = 'top'>


PUT



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/cgnv6/stateful-firewall/global



.. raw:: html

   </td><td valign = 'top'>


:ref:`378_global_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   <tr  style='border-bottom: thin solid;'><td valign = 'top'>


Delete Object



.. raw:: html

   </td><td valign = 'top'>


DELETE



.. raw:: html

   </td><td valign = 'top'>


/axapi/v3/cgnv6/stateful-firewall/global



.. raw:: html

   </td><td valign = 'top'>


:ref:`378_global_attributes`



.. raw:: html

   </td><td></td></tr>




.. raw:: html

   </table>

.. _378_global_attributes:

global attributes
-----------------

    **respond-to-user-mac**

        **Description** Use the user's source MAC for the next hop rather than the routing table (default: off)

        **Type:** boolean

        **Supported Values:** true, false, 1, 0

        **Default:** 0

    **sampling-enable**

        **Type:** List

    **stateful-firewall-value**

        **Description** 'enable': Enable stateful firewall; 

        **Type:** string

        **Supported Values:** enable

    **uuid**

        **Description** uuid of the object

        **Type:** string

        **Maximum Length:** 64 characters

        **Maximum Length:** 1 characters

.. _378_sampling-enable:

sampling-enable
^^^^^^^^^^^^^^^
	=============================== ===================================================
	**Specification**
	=============================== ===================================================
	 **Type**                        *list*

	 **Block object keys**             

	=============================== ===================================================

    **counters1**

        **Description** 'all': all; 'tcp_packet_process': TCP Packet Process; 'udp_packet_process': UDP Packet Process; 'other_packet_process': Other Packet Process; 'packet_inbound_deny': Inbound Packet Denied; 'packet_process_failure': Packet Error Drop; 'outbound_session_created': Outbound Session Created; 'outbound_session_freed': Outbound Session Freed; 'inbound_session_created': Inbound Session Created; 'inbound_session_freed': Inbound Session Freed; 'tcp_session_created': TCP Session Created; 'tcp_session_freed': TCP Session Freed; 'udp_session_created': UDP Session Created; 'udp_session_freed': UDP Session Freed; 'other_session_created': Other Session Created; 'other_session_freed': Other Session Freed; 'session_creation_failure': Session Creation Failure; 'no_fwd_route': No Forward Route; 'no_rev_route': No Reverse Route; 'packet_standby_drop': Standby Drop; 'tcp_fullcone_created': TCP Full-cone Created; 'tcp_fullcone_freed': TCP Full-cone Freed; 'udp_fullcone_created': UDP Full-cone Created; 'udp_fullcone_freed': UDP Full-cone Freed; 'fullcone_creation_failure': Full-Cone Creation Failure; 'eif_process': Endpnt-Independent Filter Matched; 'one_arm_drop': One-Arm Drop; 'no_class_list_match': No Class-List Match Drop; 'outbound_session_created_shadow': Outbound Session Created Shadow; 'outbound_session_freed_shadow': Outbound Session Freed Shadow; 'inbound_session_created_shadow': Inbound Session Created Shadow; 'inbound_session_freed_shadow': Inbound Session Freed Shadow; 'tcp_session_created_shadow': TCP Session Created Shadow; 'tcp_session_freed_shadow': TCP Session Freed Shadow; 'udp_session_created_shadow': UDP Session Created Shadow; 'udp_session_freed_shadow': UDP Session Freed Shadow; 'other_session_created_shadow': Other Session Created Shadow; 'other_session_freed_shadow': Other Session Freed Shadow; 'session_creation_failure_shadow': Session Creation Failure Shadow; 'bad_session_freed': Bad Session Proto on Free; 'ctl_mem_alloc': Memory Alloc; 'ctl_mem_free': Memory Free; 'tcp_fullcone_created_shadow': TCP Full-cone Created Shadow; 'tcp_fullcone_freed_shadow': TCP Full-cone Freed Shadow; 'udp_fullcone_created_shadow': UDP Full-cone Created Shadow; 'udp_fullcone_freed_shadow': UDP Full-cone Freed Shadow; 'fullcone_in_del_q': Full-cone Found in Delete Queue; 'fullcone_overflow_eim': EIM Overflow; 'fullcone_overflow_eif': EIF Overflow; 'fullcone_free_found': Full-cone Free Found From Conn; 'fullcone_free_retry_lookup': Full-cone Retry Look-up; 'fullcone_free_not_found': Full-cone Free Not Found; 'eif_limit_exceeded': EIF Limit Exceeded; 'eif_disable_drop': EIF Disable Drop; 'eif_process_failure': EIF Process Failure; 'eif_filtered': EIF Filtered; 'ha_standby_session_created': HA Standby Session Created; 'ha_standby_session_eim': HA Standby Session EIM; 'ha_standby_session_eif': HA Standby Session EIF; 

        **Type:** string

        **Supported Values:** all, tcp_packet_process, udp_packet_process, other_packet_process, packet_inbound_deny, packet_process_failure, outbound_session_created, outbound_session_freed, inbound_session_created, inbound_session_freed, tcp_session_created, tcp_session_freed, udp_session_created, udp_session_freed, other_session_created, other_session_freed, session_creation_failure, no_fwd_route, no_rev_route, packet_standby_drop, tcp_fullcone_created, tcp_fullcone_freed, udp_fullcone_created, udp_fullcone_freed, fullcone_creation_failure, eif_process, one_arm_drop, no_class_list_match, outbound_session_created_shadow, outbound_session_freed_shadow, inbound_session_created_shadow, inbound_session_freed_shadow, tcp_session_created_shadow, tcp_session_freed_shadow, udp_session_created_shadow, udp_session_freed_shadow, other_session_created_shadow, other_session_freed_shadow, session_creation_failure_shadow, bad_session_freed, ctl_mem_alloc, ctl_mem_free, tcp_fullcone_created_shadow, tcp_fullcone_freed_shadow, udp_fullcone_created_shadow, udp_fullcone_freed_shadow, fullcone_in_del_q, fullcone_overflow_eim, fullcone_overflow_eif, fullcone_free_found, fullcone_free_retry_lookup, fullcone_free_not_found, eif_limit_exceeded, eif_disable_drop, eif_process_failure, eif_filtered, ha_standby_session_created, ha_standby_session_eim, ha_standby_session_eif

.. _378_stats_data:

stats data
----------
.. list-table::
   :widths: 10 20 30 80
   :header-rows: 2
   :stub-columns: 1

   *  - 
      - Counter
      - Size
      - Description

   *  - 
      - 
      - 
      - 

   *  - 
      - session_creation_failure
      - 8
      - Session Creation Failure

   *  - 
      - tcp_packet_process
      - 8
      - TCP Packet Process

   *  - 
      - udp_fullcone_freed
      - 8
      - UDP Full-cone Freed

   *  - 
      - outbound_session_created
      - 8
      - Outbound Session Created

   *  - 
      - tcp_fullcone_created
      - 8
      - TCP Full-cone Created

   *  - 
      - fullcone_creation_failure
      - 8
      - Full-Cone Creation Failure

   *  - 
      - one_arm_drop
      - 8
      - One-Arm Drop

   *  - 
      - packet_inbound_deny
      - 8
      - Inbound Packet Denied

   *  - 
      - inbound_session_created
      - 8
      - Inbound Session Created

   *  - 
      - udp_fullcone_created
      - 8
      - UDP Full-cone Created

   *  - 
      - other_session_created
      - 8
      - Other Session Created

   *  - 
      - udp_session_created
      - 8
      - UDP Session Created

   *  - 
      - udp_packet_process
      - 8
      - UDP Packet Process

   *  - 
      - no_fwd_route
      - 8
      - No Forward Route

   *  - 
      - tcp_session_created
      - 8
      - TCP Session Created

   *  - 
      - other_session_freed
      - 8
      - Other Session Freed

   *  - 
      - eif_process
      - 8
      - Endpnt-Independent Filter Matched

   *  - 
      - inbound_session_freed
      - 8
      - Inbound Session Freed

   *  - 
      - udp_session_freed
      - 8
      - UDP Session Freed

   *  - 
      - no_rev_route
      - 8
      - No Reverse Route

   *  - 
      - packet_process_failure
      - 8
      - Packet Error Drop

   *  - 
      - no_class_list_match
      - 8
      - No Class-List Match Drop

   *  - 
      - other_packet_process
      - 8
      - Other Packet Process

   *  - 
      - tcp_fullcone_freed
      - 8
      - TCP Full-cone Freed

   *  - 
      - outbound_session_freed
      - 8
      - Outbound Session Freed

   *  - 
      - tcp_session_freed
      - 8
      - TCP Session Freed

   *  - 
      - packet_standby_drop
      - 8
      - Standby Drop