Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Archive] [IDP] How to force the NIC Bypass Mode

0

0

Article ID: KB20542 KB Last Updated: 27 Mar 2020Version: 4.0
Summary:
This article provides information on how to enable NIC Bypass on the IDP device, when traffic drop issues occur.
Symptoms:
At times, when traffic is being black holed or dropped at the IDP device or disrupted continuously (due to the IDP device crashing or any other similar IDP issue), it is necessary to change the mode of the IDP device. If the traffic is critical, you might prefer to bypass the traffic from the IDP for the time being.

 
Solution:
Verify if NIC Bypass in enabled in ACM; this can be found in the Reconfigure Virtual Routers. Ensure that the nicBypass daemon is on by using the bypassStatus command. When confirmed, go to the CLI and execute the following command:
idp.sh stop
This will force the IDP to the NIC Bypass mode. Later on, when everything is stable, restart the service by using the following command:
idp.sh start
Warning: IDP devices with fiber interfaces do not support internal NIC bypass. The exception are units that support the IDP-1GE-4SX-BYP interface card, which is only IDP-800 and IDP-8200. Any fiber IDP devices, without this card, will result in traffic outage.
Modification History:
2020-03-27: reviewed for accuracy.  
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search