Configuring Advanced Settings for a Transparent IP Mode Interface

To configure advanced settings for a transparent IP mode interface

1. Navigate to NETWORK | System > Interfaces.
2. Click Edit on the interface you would like to modify.

3. In the Edit Interface dialog, click Advanced.

   

4. For Link Speed, Auto Negotiate is selected by default, which causes the connected devices to negotiate the speed and duplex mode of the Ethernet connection automatically. To force Ethernet speed and duplex, select one of the following options from Link Speed:

   For 1 Gbps interfaces	For 10 Gbps interfaces
   1 Gbps - Full Duplex	10 Gbps - Full Duplex
   100 Mbps - Full Duplex
   100 Mbps - Half Duplex
   10 Mbps - Full Duplex
   10 Mbps - Half Duplex

   If you select a specific Ethernet speed and duplex, you must force the connection speed and duplex from the Ethernet card to the firewall as well.

5. Use Default MAC Address is selected by default. Override Use Default MAC Address for the Interface by choosing Override Default MAC Address and entering the MAC address in the field.

6. Select Shutdown Port to temporarily take this interface offline for maintenance or other reasons. If connected, the link goes down. This option is not selected by default.

   Clear the option to activate the interface and allow the link to come back up. This option is not selected by default.

   You cannot shut down the management interface or the interface you are currently using. If you select this option, a confirmation message displays: Click OK to shut down the port.

   You can shut down the interface by clicking Enabled in the Enabled column for the interface. A confirmation message displays.

   • If you click OK, the Enabled icon turns to a Disabled icon. To enable the interface, click the Disabled icon. A confirmation message displays.
   • If you click OK, the Disabled icon turns to an Enabled icon.
7. For the AppFlow feature, select Enable flow reporting to allow flow reporting on flows created for this interface. This option is selected by default.
8. Optionally, select Enable Multicast Support to allow multicast reception on this interface. This option is not selected by default.

9. Optionally, select Enable Default 802.1p CoS to tag information passing through this interface with 802.1p priority information for Quality of Service (QoS) management. This option is not selected by default.

   This option is available only for VLAN interfaces.

   Packets sent through this interface are tagged with VLAN id=0 and carry 802.1p priority information. To make use of this priority information, devices connected to this interface should support priority frames. QoS management is controlled by access rules on POLICY | Rules and Policies > Access Rules.

10. Optionally, to exclude the interface from Route Advertisement, select Exclude from Route Advertisement (NSM, OSPF, BGP, RIP). This option is not selected by default.
11. Optionally, if you have enabled DNS Proxy, the Enable DNS Proxy option displays. To enable DNS Proxy on the interface, select the option. This option is not selected by default.
12. Optionally, enable Asymmetric Route Support on the interface by selecting Enable Asymmetric Route Support. If enabled, the traffic initialized from this interface supports asymmetric routes, that is, the initial packet or response packet can pass through from other interfaces. This option is not selected by default. For more information about asymmetric routing, see Asymmetric Routing In Cluster Configurations.

13. To specify the largest packet size (MTU – maximum transmission unit) that the interface can forward without fragmenting the packet, enter the size of the packets that the port receives and transmits in the Interface MTU field:

    Standard packets (default)	1500
    Jumbo frame packets	9000

14. If bandwidth management has been enabled, to configure BWM for this interface, go to Enabling Bandwidth Management on an Interface.
15. Click OK.