Bypass card status check

Herschel_Liang — Sat, 06 Jan 2018 09:47:16 GMT

Hi all,

In sk85560, it refer to that we can used "fwfonic_bypass [interface name] status" check bypass status.

(V) Using the Bypass Interface

The Bypass feature works automatically, and normally there is no need for the administrator to manually change the Bypass Card's state. Nevertheless, using the fwfonic_bypass script, administrator can manually activate/deactivate Bypass functionality, and also check the current Bypass status:

Usage:

[Expert@HostName:0]# fwfonic_bypass {<bypass_interface_name> | all} {on | off | status}

Examples:

[Expert@HostName:0]# fwfonic_bypass eth1-01 status
[Expert@HostName:0]# fwfonic_bypass all on

Note: <bypass_interface_name> is the name for the master interface of the bypass pair.

Status Response Explanation:

Disabled = Fail-open card is not configured to operate in fail open mode.

Off = Fail-open card is configured, but is currently offloading traffic to the firewall for inspection.

On = Fail-open card is configured and is in fail-open mode, passing traffic without inspection.

As the capture screen, I found it appear one bypass interface eth02-01, but eth2-01 and eth2-02 is a pair of bypass interface we used. Is it normal? Thx!

B.R.

topic Bypass card status check in Firewall and Security Management

Bypass card status check

(V) Using the Bypass Interface