BYPASS on Startup

GiacomoV Lv1Posted 17 Apr 2023 21:45

Hi,
I have a NGAF 5100. I see when I plug in the AC cord the bypass led still on until whole system boots up.
What does it mean?
Can this create a storm broadcast if I aggregate the interface eth2 and eth3 ?

In particular I have to put two NGAF in HA mode. I want to be sure that there aren't issue if one firewall during the boot.
Thanks.

Zonger has solved this question and earned 20 coins.

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

The bypass LED on your Sangfor NGAF 5100 staying on until the system boots up is expected behavior. It indicates that the device is in bypass mode, meaning that the network traffic is allowed to pass through the device without being inspected by the NGAF's security functions. This is done to ensure that network connectivity is maintained even in the event of a power failure or other hardware failure on the NGAF.

Once the system is fully booted up and the bypass LED turns off, the NGAF will resume normal operation and begin inspecting network traffic for security threats.

Regarding your question about aggregating interfaces eth2 and eth3, the bypass mode should not affect this configuration. Aggregating the two interfaces should not create a broadcast storm, as long as the aggregation is configured properly and the network devices connected to the aggregated interface are also properly configured.

When setting up the two NGAFs in HA mode, it's important to ensure that both devices are fully operational before enabling HA mode. This will help to avoid any potential issues during the boot process, as well as ensure that the two devices are properly synchronized for HA failover.
Is this answer helpful?
Raza Islam Lv3Posted 27 Apr 2023 19:01
  
The bypass LED on your NGAF 5100 staying on until the whole system boots up is likely an indication that the device is going through a power-on self-test (POST) process. During this process, the device is checking all its components to make sure they are working correctly before fully booting up. Once the POST process is complete, the device will boot up and the bypass LED should turn off.

Regarding your question about aggregating the interface eth2 and eth3, it is unlikely that doing so would create a storm broadcast. Link aggregation, also known as NIC teaming, allows you to combine multiple network interfaces into a single logical interface. This can improve network performance and provide redundancy in case one interface fails. However, it is important to configure link aggregation properly to avoid network issues such as broadcast storms. If you are unsure about how to configure link aggregation on your  NGAF 5100, you should consult the device's documentation or seek the assistance of a qualified network administrator.
faysalji Lv3Posted 26 Apr 2023 17:40
  
The bypass LED on your Sangfor NGAF 5100 indicates the status of the network interface card (NIC) bypass feature. When the bypass LED is on, it means that the NIC bypass feature is enabled, and network traffic can continue to flow even if the firewall is powered off or rebooting.

During the boot process, it's normal for the bypass LED to remain on until the firewall completes its initialization and begins processing network traffic. This should not cause any broadcast storms or other network issues, as long as the interfaces are properly configured and connected to your network.

Regarding your question about configuring two NGAF devices in HA mode, it's important to ensure that both devices are properly configured and synchronized before enabling HA mode. This includes configuring the network interfaces, setting up the synchronization interface, and verifying that the devices can communicate with each other.

During the boot process, one of the NGAF devices will become the active device, while the other remains in standby mode. If the active device experiences any issues during the boot process, the standby device will take over to ensure continuity of service. As long as both devices are properly configured and synchronized, the boot process should not cause any issues with the HA setup.
Farina Ahmed Lv5Posted 26 Apr 2023 16:37
  
Every hardware on bootup does some checks which we called Power On Self Test and until all these checks are find OK the systems will not be started. So the LEDs in these cases just indicates the status, If there color are red or amber then the situation is alarming otherwise for green everything is fine.
kmrnliaqat Lv3Posted 25 Apr 2023 18:44
  
startup deive take 2 minites to upload the OS. then screen will be normal if not then shutdont the NGAF and on after 5minutes
CLELUQMAN Lv3Posted 25 Apr 2023 10:42
  
bypass LED staying on during boot on NGAF is normal. It shouldn't cause broadcast storms during aggregation, and in HA, traffic is switched to the second device when the first isn't functioning.
Imran Tahir Lv4Posted 24 Apr 2023 20:00
  
When we start the device it take two minutes to start up suting this time light will be yellow after two minutes if successfully boot light will be green other wise shutdown the device
rivsy Lv5Posted 24 Apr 2023 14:42
  
It mean bypass mode is enabled
noime Lv3Posted 24 Apr 2023 13:36
  
Go to logs, After startup, the ALARM indicator may flash, which means device is writing logs.
Noah19 Lv3Posted 24 Apr 2023 13:33
  
The NGAF 5100's bypass LED displays the state of the system's bypass feature.

I Can Help:

Change

Moderator on This Board

1
131
3

Started Topics

Followers

Follow

18
8
0

Started Topics

Followers

Follow

Board Leaders