Hardware Bypass Network Modules - Cisco Firepower 9300 Hardware Installation Manual

Overview
Figure 13: FPRK9-DNM-2X100G
1
3

Hardware Bypass Network Modules

Fail-to-wire (also known as hardware bypass) is a physical layer (Layer 1) bypass that allows paired interfaces
to go into bypass mode so that the hardware forwards packets between these port pairs without software
intervention. Fail-to-wire provides network connectivity when there are software or hardware failures. Hardware
bypass is useful on ports where the Firepower security appliance is only monitoring or logging traffic. The
hardware bypass network modules have an optical switch that is capable of connecting the two ports when
needed.
The fail-to-wire network modules have built-in SFPs.
Hardware bypass is supported only on a fixed set of ports. You can pair Port 1 with Port 2, Port 3 with Port
4, but you cannot pair Port 1 with Port 4 for example.
Note
Hardware bypass is only supported in inline mode. Also, hardware bypass support depends on your software
application.
Captive screw/handle
100-Gigabit Ethernet QSFP28 fiber port
Ethernet X/2
Hardware Bypass Network Modules
100-Gigabit Ethernet QSFP28 fiber port
2
Ethernet X/1
Network activity LEDs
4
• Unlit—No connection or port is not
in use.
• Amber—No link or network failure.
• Green, flashing—Network activity.
Cisco Firepower 9300 Hardware Installation Guide
19