Prerequisites:
The Sensor must be set up and have established trust with a Manager server.
The Sensor has a free port pair which can be deployed in inline Active Fail-Open mode.
It is assumed that you have inserted necessary transceiver modules into the Sensor if you have completed cabling the Sensor and Active Fail-Open module.
When you set up a Sensor for the first time, its ports are disabled by default. The Sensor ports must be manually configured for inline Active Fail-Open operation.
Steps:
In the Manager, go to Devices → <Admin_Domain_Name> → Devices → <Device_Name> → Setup → Physical Ports.
Double-click port one of the configurable ports, say 1/1 (Gx/1).
A configuration panel appears on the right side of the window.
Click the State drop-down and select Enabled.
This will impact the port 2/2 (Gx/2) as well. So, ports 2/1-2/2 (Gx/1-Gx/2) are enabled.
Click the Certification drop-down and select an option depending on your requirement.
Note
Based on the I/O module and port selected, you may be required to select the Auto Negotiate checkbox and set the speed under Maximum Negotiable Speed (Duplex). For certain ports, the speed is automatically selected and you will not be able to edit it.
Select FEC checkbox if you want to enable Forward Error Connection.
Note
FEC should only be enabled when needed, and the device to which this port is connected must have FEC enabled too.
Under Mode, select Inline Active Fail-Open – Active from the drop-down list.
Under Placement, select Inside Network or Outside Network from the drop-down list, depending on how you want to configure your ports.
.png)
Click Save.
Note
An Alert! pop-up displays stating the changes made on port x/1 impacts x/2 as well. Click OK.
The Sensor and Active Fail-Open module are set up. When traffic passes through the ports, the port link status changes to Up and turns green.