Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Will VLAN translation work during Layer-2-Fallback (L2FB)

    • Updated:
    • 4 Oct 2017
    • Product/Version:
    • TippingPoint IPS N-series All
    • TippingPoint IPS NX-series All
    • TippingPoint IPS S-series All
    • TippingPoint TPS All
    • TippingPoint Virtual TPS All
    • Platform:
Summary
Answer: Yes, VLAN translation will work during a L2FB episode.

Intrinsic Network High Availability (HA) Intrinsic HA, also known as “Layer-2-Fallback” (L2FB), is a mode wherein the IPS will pass traffic from one interface to its partner without inspecting the traffic. If an internal failure is detected, the device goes into L2FB mode and either permits or blocks all traffic on each segment, depending on the preference of the network administrator (see below).
Details
Public
User-added image

Some of the checks, thresholds, and resulting actions can be customized based on each customer's HA and security requirements. For example, L2FB can be configured to fail open (Permit All) or closed (Block All) on a per segment basis. L2FB can also be enabled manually. Traffic flowing through each segment on the device will be either blocked or permitted based on the segment configuration. Any permitted traffic will not be inspected. 

Both L2FB and VLAN translation are implemented on the “Broadcom Switch” so as long as the IPS device has power, uninspected traffic fill flow and VLAN translation will still occur.
 
Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
TP000091079
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.