HomeHome ArticlesArticles Most Popular ArticlesMost Popular Articles Most Helpful ArticlesMost Helpful Articles Request New ArticleRequest New Article
RSS Feeds
DrillDown Icon Table of Contents Back
 . . . . . . . . . . . . .
DrillDown Icon Knowledge Base Information
DrillDown Icon Cyberoam Security Appliances (UTM and NGFW)
DrillDown Icon FAQs on Cyberoam and Sophos Firewall
DrillDown Icon Vulnerability Security Advisories
DrillDown Icon Best Practices & Policies
DrillDown Icon Protect Your Cyberoam Appliances from Power Fluctuations
DrillDown Icon Technical Library
DrillDown Icon Deployment
DrillDown Icon Registration & Licensing
DrillDown Icon System
DrillDown Icon Administration
DrillDown Icon Troubleshoot connectivity issue between Cyberoam Appliance and CCC
DrillDown Icon Configure Single Sign On Authentication for Wireless Users in a Network using API
DrillDown Icon Password Recovery Procedure for Cyberoam
DrillDown Icon Change the Default Port in Cyberoam
DrillDown Icon Provide Read-Only access of Cyberoam Web Admin Console
DrillDown Icon Change the Default Password of Super Administrator
DrillDown Icon From where do I set Password Complexity for Administrative users?
DrillDown Icon Can I customize the Dashboard display?
DrillDown Icon From where do I block Administrator login in case of suspicious login attempts?
DrillDown Icon Enable/Restore Cyberoam Appliance Access
DrillDown Icon Configure Inactivity Timeout for Administrator Logon Session
DrillDown Icon What is LAN/Hardware Bypass Mode?
DrillDown Icon Configuration
DrillDown Icon Maintenance
DrillDown Icon High Availability (HA)
DrillDown Icon Certificate
DrillDown Icon Diagnostics
DrillDown Icon Error <Service could not be started due to improper configuration>
DrillDown Icon Integrate OpManager with Cyberoam
DrillDown Icon From where do I see Cyberoam firmware version?
DrillDown Icon Configure Cyberoam as SNMP Agent
DrillDown Icon Obtain Object Identifiers (OIDs) from Cyberoam Custom Management Information Base (MIB)
DrillDown Icon Is there a Console Port on Cyberoam for Serial Access?
DrillDown Icon Is Cyberoam dependent on third party solutions for OS?
DrillDown Icon How to configure Cyberoam to scan custom (non-standard) ports used by various services?
DrillDown Icon Manage Cyberoam Through SNMP Over VPN
DrillDown Icon Objects
DrillDown Icon Network
DrillDown Icon Identity
DrillDown Icon Firewall
DrillDown Icon VPN
DrillDown Icon IPS
DrillDown Icon Web Filter
DrillDown Icon Application Filter
DrillDown Icon Web Application Firewall (WAF)
DrillDown Icon IM
DrillDown Icon Quality of Service (QoS)
DrillDown Icon Anti Virus
DrillDown Icon Anti Spam
DrillDown Icon Logs & Reports
DrillDown Icon Clients
DrillDown Icon Cyberoam Maintenance
DrillDown Icon Compatibility
DrillDown Icon Archives
DrillDown Icon Visio Stencils for Cyberoam security appliances
DrillDown Icon Product Technical Support
DrillDown Icon Cyberoam Virtual Security
DrillDown Icon Cyberoam iView
DrillDown Icon Cyberoam Central Console
DrillDown Icon Cyberoam's On-Cloud Management Service
  Subscribe Print PreviewPrint Current Article and All Sub-Articles
Rate Icon Rate Icon Rate Icon Rate Icon Rate Icon
 
What is LAN/Hardware Bypass Mode?

Overview

Cyberoam goes into a LAN Bypass Mode (also called Hardware Bypass Mode) in case of a Power Failure or Hardware Malfunction, if LAN Bypass is enabled in the Appliance. In Bypass Mode, Cyberoam allows all traffic to pass through without any scanning. One (1) or Two (2) pairs of interfaces of the Appliance get bridged, allowing uninterrupted incoming and outgoing traffic flow.The LED on the front panel of the Appliance blinks RED when Bypass Mode is active. 

In case of a Power Failure, once power is restored, Cyberoam automatically resumes normal functionality. In case of a Hardware Failure, contact Cyberoam Support.
 

Note:

 

Cyberoam will go into a LAN Bypass Mode on power or hardware failure ONLY if LAN Bypass is previously enabled in the Appliance. To know how to enable LAN Bypass, refer to the Configure LAN Bypass section.


Applicable Firmware Version
 
•   For Firmware version 10.00 onwards, LAN/Hardware Bypass is available ONLY when the Appliance is deployed 
     in Bridge Mode.
•   For Firmware version10.02.00 Build 224 onwards, LAN/Hardware Bypass can be configured in Bridge Mode. If Cyberoam 
     is in Mix Mode, LAN Bypass can be configured on the Bridge Pair ONLY.

Supporting Cyberoam Models 

   CR50ia, CR100ia, CR200i and CR300i have One (1) Hardware Bypass Segment, i.e., 2 interfaces support bypass
    feature, forming a single bridge.
   CR50iNG, CR100iNG, CR200iNG/XP, CR300iNG/XP, CR500ia, CR500ia/1F/10F, CR500ia-RP, CR500iNG/XP, CR750ia/1F/10F,
    CR750iNG-XP, CR1000ia/10F, CR1000iNG-XP, CR1500ia/10F, CR1500iNG-XP, CR2500iNG, CR2500iNG-XP have Two (2) Hardware
    Bypass Segments, i.e., 4 interfaces support bypass feature, forming 2 bridges.
The table below shows which pair of interfaces form a bridge in each appliance.
 

Appliance Model

Interface Pairs

CR50ia

A-B

CR100ia

A-B

CR200i

C-D

CR300i

C-D

CR50iNG

A-B, C-D

CR100iNG

A-B, C-D

CR200ING

E-F, G-H

CR200ING-XP

A-B, C-D

CR300iNG

E-F, G-H

CR300iNG-XP

A-B, C-D

CR500ia

E-F, G-H

CR500ia-1F/10F

A-B, C-D

CR500ia-RP

E-F, G-H

CR500iNG-XP

C-D, E-F

CR750ia

I-J, K-L

CR750ia-1F/10F

A-B, C-D

CR750iNG-XP

C-D, E-F

CR1000ia

I-J, K-L

CR1000ia-10F

A-B, C-D

CR1000iNG-XP

<As per plugged-in Slot>*

CR1500ia

U-V, W-X

CR1500ia-10F

M-N, O-P

CR1500iNG-XP

<As per plugged-in Slot>*

CR2500iNG

M-N, O-P

CR2500iNG-XP

<As per plugged-in Slot>*

*To avail LAN Bypass feature in CR1000iNG-XP, CR1500iNG-XP and CR2500iNG-XP, a LAN Bypass-enabled, 4-port Copper FleXi-Port Module has to be plugged into an available Slot.

Configure LAN Bypass

By default LAN Bypass is disabled in Cyberoam. You can enable/disable LAN Bypass by following the steps given below.

1.    Login to Cyberoam CLI Console (Telnet or SSH).

2.    Choose Option 4. Cyberoam Console and press Enter.

3.    View status if LAN bypass is enabled/disabled by executing the following command:

       console> show lanbypass
     
        

4.    Enable/disable bypass by executing the following command. Here, as an example, we have enabled Bypass Mode. 

       console> set lanbypass <on/off>

      

 

 

 

 

 

                                                                                                                              Document Version: 2.4 – 1 September, 2015
Attachments
Article ID: 2018