CLI Configuration for TAP Mode

This section describes the configuration tasks required for a network segment to operate in TAP mode.

By default, each network segment will transition to Inline mode. Therefore, you must set the following configuration values for a network segment to transition into TAP mode:

l Set the current module and segment l Keep Heartbeat active mode: Enable l Heartbeat active mode: Disable l Bypass mode: set to TAP mode

Set Keep Heartbeat Active Mode

Set the Keep Heartbeat Active Mode to enabled, so that the Heartbeat Active Mode value will survive a power cycle or restart. If you set this parameter to disabled, the segment will come up in Inline mode.

FBG-3002L#set_keep_hb_act_mode enable

Disable Heartbeat Active Mode

Set heartbeat active mode to disabled. The segment transitions to the mode configured in Bypass Mode.

FBG-3002L#set_hb_act_mode disable

Set Bypass Mode

When the heartbeat active mode is set to disabled, the segment transitions to the mode configured in Bypass Mode. Set the value to TAP.

FBG-3002L#set_bypass_mode tap

CLI Configuration for Modules

CLI Configuration for Modules

The FortiBridge host system houses up to three bypass modules.

A bypass module supports one or more network segments. A network segment provides one inline or bypass traffic path. Each segment provides two network ports (NET0 and NET1) and two monitoring ports (MON1 and MON2).

The available Bypass modules include:

• 40G bypass module l Supports one bypass segment.
• Dual-rate 1/10G bypass module l Supports two bypass segments l Available with short-reach or long-reach optics.

The following sections describe common configuration tasks required for the bypass modules.

Before you start to configure a specific module or segment, you need to set the module and segment as “current”, using the set_seg command.

Select the Current Module

Set the module and segment to be current:

FBG-3002L#set_seg 1 1

Displays the current module and segment :

FBG-3002L#get_seg

Blinks the S.OK LED on the current module:

FBG-3002L#whoami enable

List the Module Properties

Displays the settings for each of the installed modules.

FBG-3002L#get_dev_prop

Display the Module State

Displays information about the state of the current module.

Note: this command resets the Alarm LED.

FBG-3002L#get_dev_state

CLI Configuration for Modules

Set the Link Speed

The 10G bypass modules support dual-rate link speed (1G or 10G). To set the link speed, use the set_seg_speed command. The command will set the link speed for the current segment. You can specify all to set the value for all of the segments on the current module:

FBG-3002L#set_seg_speed [all] (auto | 10g | 1g)

Having trouble configuring your Fortinet hardware or have some questions you need answered? Check Out The Fortinet Guru Youtube Channel! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!