Configuring the interface bypass on the USG firewalls

You can configure the electrical interface bypass and optical interface bypass to avoid network communication interruption due to device faults and improve network reliability. The bypass function requires the bypass interface card.
Because the USSG6000 supports only the electrical interface bypass function, the USG6000 has only the electrical interface bypass configuration.//Enter the system view.
[USG] bypass-link 5/0/1 //Enter the bypass interface configuration view.
[USG-bypass-link5/0/1] switch bypass //Switch the interface to the bypass state.
[USG-bypass-link5/0/1] auto-recover //Enable the automatic restoration function in the bypass state.
Note: If the automatic restoration function in the bypass state is enabled, when the interface is automatically switched to the bypass state, the interface state is automatically switched to the non-bypass state. If the automatic restoration function in the bypass state is disabled, the interface remains in the bypass state.
By default, the automatic restoration function in the bypass state is enabled.
When four interfaces of the 4XGE electrical bypass interface card are in the non-bypass state and provide gigabit Ethernet electrical interface functions, one pair of adjacent Bypass interfaces (GE0 and GE1, and GE2 and GE3) are directly interconnected in the bypass state.
USG2000/5000 Example of the bypass function configuration of an optical interface:
[USG] system-view //Enter the system view.
[USG] bypass-link 5/0/1 //Enter the bypass interface configuration view.
[USG-bypass-link5/0/1] mode force protection-path //Forcibly keep the bypass link 5/0/1 work in the protection loop.
Note: By default, the bypass link is in automatic mode. You must specify the bypass link number on the optical interface connected to the bypass interface card to ensure the switching stability of the optical bypass interface.

Scroll to top