- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- Re: An interface down, will enter bypass mode?
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
An interface down, will enter bypass mode?
Hi, engineers, the device is equipped with a hardware bypass card. When a certain interface of the bypass card is down, will the device enter bypass mode?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You are probably referring to Fail-Open NIC. It goes to fail-open mode when there is a power or software failure of the appliance. If one of ports on the card itself is down, fail-open is not activated.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I think you misunderstand the purpose of FO NIC. It is to maintain connectivity in case of appliance failure. It short-cuts the network cables, allowing two ports to be connected directly, when the appliance where FO NIC is installed is down because of any failure.
Here is quite from https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
The appliance enters Bypass Mode, if one of the following occurs:
- There is a power loss.
- The appliance is rebooting.
- The appliance is overloaded. It enters Bypass Mode for at least 1 minute.
- There is a system failure. It enters Bypass Mode for at least 5 minutes.
- The appliance stops responding for 60 seconds.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
However, we do encounter in the user's case, when the device hardware bypass card two interface occurs link down, and then the device into bypass mode
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would involve TAC to get to the root of this!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
From what you are showing, it is the other way around. First, the card goes into bypass, then one of the interfaces goes down.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Agree with @G_W_Albrecht, looks like a support case
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
