Appendix E - FortiProxy bypass mode

The FPX-2000E, 2000G, 4000E, and 4000G include a PCIe x2 Gigabit Copper One Group Bypass Ethernet Adapter. By default, the ports are independent interfaces. You can configure the two Ethernet ports to run in bypass mode where the connections of the two ports are disconnected from the system and switched over to the other port to create a crossed connection loop-back between the two ports, which means all packets received from one port are transmitted to the adjacent port and vice versa. Bypass mode provides fail open support for maximum up time for the network.

To enable and configure bypass mode:

1. Enable bypass mode:

   config system bypass

   set bypass-mode [powerup|powerdown|both]

   end

   powerup	Enable bypass mode only when the FortiProxy unit is running.
   powerdown	Enable bypass mode only when the FortiProxy unit is down.
   both	Always enable bypass mode on the FortiProxy unit regardless of its running status.

2. Configure whether to enable watchdog for bypass interfaces using the following command:

   config system bypass

   set bypass-watchdog {disable | enable}

   end

To disable bypass mode:

1. Run the following command:

   config system bypass

   set bypass-mode off

   end