Show the active session distribution policy.
show session distribution policycommand to view the active session distribution policy.
The following output is from a PA-7080 firewall with four NPCs installed in slots 2, 10, 11, and 12 with the ingress-slot distribution policy enabled:
Change the active session distribution policy.
set session distribution-policycommand to change the active session distribution policy.
For example, to select the session-load policy, enter the following command:
View session distribution statistics.
show session distribution statisticscommand to view the dataplane processors (DPs) on the firewall and the number of sessions on each active DP.
The following output is from a PA-7080 firewall:
DP Active columnlists each dataplane on the installed NPCs. The first two characters indicate the slot number and the last three characters indicate the dataplane number. For example, s1dp0 indicates dataplane 0 on the NPC in slot 1 and s1dp1 indicates dataplane 1 on the NPC in slot1.
Dispatchedcolumn shows the total number of sessions that the dataplane processed since the last time the firewall rebooted.
Dispatched/seccolumn indicates the dispatch rate. If you add the numbers in the
Dispatchedcolumn, the total equals the number of active sessions on the firewall. You can also view the total number of active sessions by running the
show session info CLIcommand.
The PA-5200 Series firewall output will look similar, except that the number of DPs depends on the model and there is only one NPC slot (s1).