topic Re: An interface down, will enter bypass mode? in Firewall and Security Management

An interface down, will enter bypass mode?

Wang — Thu, 02 Apr 2020 08:30:10 GMT

Hi, engineers, the device is equipped with a hardware bypass card. When a certain interface of the bypass card is down, will the device enter bypass mode?

Re: An interface down, will enter bypass mode?

_Val_ — Thu, 02 Apr 2020 08:52:17 GMT

You are probably referring to Fail-Open NIC. It goes to fail-open mode when there is a power or software failure of the appliance. If one of ports on the card itself is down, fail-open is not activated.

Re: An interface down, will enter bypass mode?

Wang — Thu, 02 Apr 2020 09:09:14 GMT

Yes, it is fail-open NIC. There is a user's hardware bypass card with only two interfaces. When these two interfaces are down, the device will enter bypass mode.So I want to ask, when an interface is down, will it enter bypass mode?According to your reply, an interface down, the device will not enter bypass mode

Re: An interface down, will enter bypass mode?

_Val_ — Thu, 02 Apr 2020 09:48:35 GMT

I think you misunderstand the purpose of FO NIC. It is to maintain connectivity in case of appliance failure. It short-cuts the network cables, allowing two ports to be connected directly, when the appliance where FO NIC is installed is down because of any failure.

Here is quite from https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk85560

The appliance enters Bypass Mode, if one of the following occurs:

There is a power loss.
The appliance is rebooting.
The appliance is overloaded. It enters Bypass Mode for at least 1 minute.
There is a system failure. It enters Bypass Mode for at least 5 minutes.
The appliance stops responding for 60 seconds.

Re: An interface down, will enter bypass mode?

Wang — Thu, 02 Apr 2020 09:55:10 GMT

However, we do encounter in the user's case, when the device hardware bypass card two interface occurs link down, and then the device into bypass mode

Re: An interface down, will enter bypass mode?

G_W_Albrecht — Thu, 02 Apr 2020 10:08:05 GMT

I would involve TAC to get to the root of this!

Re: An interface down, will enter bypass mode?

_Val_ — Thu, 02 Apr 2020 10:25:07 GMT

From what you are showing, it is the other way around. First, the card goes into bypass, then one of the interfaces goes down.

Re: An interface down, will enter bypass mode?

_Val_ — Thu, 02 Apr 2020 10:25:58 GMT

Agree with @G_W_Albrecht, looks like a support case

Re: An interface down, will enter bypass mode?

Wang — Thu, 02 Apr 2020 14:37:04 GMT

Well, thank you very much

Re: An interface down, will enter bypass mode?

Wang — Thu, 02 Apr 2020 14:40:01 GMT

Well, thank you very much and I hope to have your continued support