Important:

• When you enable or disable the Breakout Mode on a port, you must treat the procedure as if you install or remove network interfaces on the appliance. Schedule a maintenance window.
• When you enable or disable the Breakout Mode on a port, all IP configuration is lost on the port and its "child" interfaces. You must configure the applicable IP addresses again.
• When you enable the Breakout Mode on a port, auto-configuration and link speed are not dynamic for the "child" interfaces. Therefore, those options are greyed out.

1

Enable the breakout mode on the port.

2

Connect the breakout cable between the port and the peer devices.

3

Reboot the appliance.

4

Configure the applicable IP addresses on the "child" interfaces.

1

Disable the breakout mode on the port.

2

Disconnect the breakout cable between the port and the peer devices.

3

Reboot the appliance.

4

Connect the optical cable between this port and the peer device.

5

Configure the applicable IP address on the port.

1

Insert the supported Short Range transceiver into this port.

Note - If you insert an invalid transceiver, Gaia OS shows a warning dialog. However, it does not prevent the configuration of the breakout mode.

2

With a web browser, connect to the Gaia Portal on the Security Appliance at:

https://<IP Address of Gaia Management Interface>

3

From the navigation tree, click Network Management > Network Interfaces.

4

Select the applicable interface (eth<Slot#>-01 or eth<Slot#>-05) and click Edit.

Interface properties pop-up window opens.

5

At the top, select Enable.

6

At the bottom, click the Breakout Mode tab.

7

In the Selected Mode field, select 10G/full(breakout).

8

Click OK to close the interface properties pop-up window.

9

Connect the breakout cable between this port and the remote peer devices.

10

Reboot the Security Appliance:

1. In the navigation tree, click Maintenance > Shut Down.
2. Click Reboot.

11

With a web browser, connect to the Gaia Portal on the Security Appliance at:

https://<IP Address of Gaia Management Interface>

12

From the navigation tree, click Network Management > Network Interfaces.

Make sure you see the applicable interface and its "child" interfaces:

• eth<Slot#>-01, eth<Slot#>-02, eth<Slot#>-03, and eth<Slot#>-04
• eth<Slot#>-05, eth<Slot#>-06, eth<Slot#>-07, and eth<Slot#>-08

13

Configure the IP addresses on the applicable "child" interfaces.

See the R80.20 Gaia Administration Guide - Chapter Network Management - Section Network Interfaces - Subsection Physical Interfaces.

1

With a web browser, connect to the Gaia Portal on the Security Appliance at:

https://<IP Address of Gaia Management Interface>

2

From the navigation tree, click Network Management > Network Interfaces.

3

Select the applicable interface (eth<Slot#>-01 or eth<Slot#>-05) and click Edit.

Interface properties pop-up window opens.

4

At the bottom, click the Breakout Mode tab.

5

In the Selected Mode field, select 40G/full.

6

Click OK to close the interface properties pop-up window.

7

Disconnect the breakout cable between this port and the remote peer devices.

8

Reboot the Security Appliance:

1. In the navigation tree, click Maintenance > Shut Down.
2. Click Reboot.

9

With a web browser, connect to the Gaia Portal on the Security Appliance at:

https://<IP Address of Gaia Management Interface>

10

From the navigation tree, click Network Management > Network Interfaces.

Make sure you see only the applicable port interface (eth<Slot#>-01 or eth<Slot#>-05) without its "child" interfaces.

11

Connect the optical cable between this port and the remote peer device.

12

Configure the IP address on this port.

See the R80.20 Gaia Administration Guide - Chapter Network Management - Section Network Interfaces - Subsection Physical Interfaces.

Gaia Clish

Run one of these commands:

• show asset ac
• fwaccel stat

Expert mode

Run one of these commands:

• clish -c "show asset ac"
• fwaccel stat

eth<Slot#>-<Port#>

Specifies the 40 GbE port on the Falcon-40G card.

• <Slot#> - Denotes the ordinal number of the front-facing I/O slot, which the acceleration card populates
• <Port#> - Denotes the main port on the card - 01 or 05

For example, eth1-01 or eth1-05.

To determine what slot number the acceleration card populates:

• In Gaia Clish, run one of these commands:
  • show asset ac
  • fwaccel stat
• In the Expert mode, run one of these commands:
  • clish -c "show asset ac"
  • fwaccel stat

force

Forces the change in configuration and skips the confirmation steps that you may get from the Gaia OS.

This parameter is only intended for use for when you save the Gaia OS configuration to a file (with the "save configuration <file>" command), and later load the configuration from that saved file.

Examples:

• When you disable the breakout mode, Gaia OS prompts you to confirm the removal of the "child" interfaces.
• When you enable the breakout mode, and the current transceiver does not support the requested speed change, Gaia OS shows a warning.

1

Insert the supported Short Range transceiver into this port.

Note - If you insert an invalid transceiver, Gaia OS shows a warning dialog. However, it does not prevent the configuration of the breakout mode.

2

Connect to the command on the Security Appliance.

3

Log in to Gaia Clish.

4

Examine the current state of the Breakout Mode on the applicable interface (eth<Slot#>-01 or eth<Slot#>-05):

• show interface eth<Slot#>-01 breakout-mode
• show interface eth<Slot#>-05 breakout-mode

5

Enable the Breakout Mode on the applicable interface (eth<Slot#>-01 or eth<Slot#>-05):

• set interface <Slot#>-01 breakout-mode 10G/full(breakout)
• set interface <Slot#>-05 breakout-mode 10G/full(breakout)

6

Save the configuration changes:

save config

7

Connect the breakout cable between this port and the remote peer devices.

8

Reboot the Security Appliance:

reboot

9

Connect to the command on the Security Appliance.

10

Log in to Gaia Clish.

11

Examine the current state of the Breakout Mode on the applicable interface:

• show interface eth<Slot#>-01 breakout-mode
• show interface eth<Slot#>-05 breakout-mode

12

Examine the "child" interfaces:

show configuration interface

Make sure you see the applicable interface and its "child" interfaces:

• eth<Slot#>-01, eth<Slot#>-02, eth<Slot#>-03, and eth<Slot#>-04
• eth<Slot#>-05, eth<Slot#>-06, eth<Slot#>-07, and eth<Slot#>-08

13

Configure the IP addresses on the applicable "child" interfaces.

See the R80.20 Gaia Administration Guide - Chapter Network Management - Section Network Interfaces - Subsection Physical Interfaces.

1

Connect to the command on the Security Appliance.

2

Log in to Gaia Clish.

3

Examine the current state of the Breakout Mode on the applicable interface:

• show interface eth<Slot#>-01 breakout-mode
• show interface eth<Slot#>-05 breakout-mode

4

Disable the Breakout Mode on the applicable interface:

• set interface eth<Slot#>-01 breakout-mode 40G/full
• set interface eth<Slot#>-05 breakout-mode 40G/full

5

Save the configuration changes:

save config

6

Disconnect the breakout cable between this port and the remote peer devices.

7

Reboot the Security Appliance:

reboot

8

Connect to the command on the Security Appliance.

9

Log in to Gaia Clish.

10

Examine the current state of the Breakout Mode on the applicable interface:

• show interface eth<Slot#>-01 breakout-mode
• show interface eth<Slot#>-05 breakout-mode

11

Examine the "child" interfaces:

show configuration interface

Make sure you see only the applicable port interface without its "child" interfaces.

12

Connect the optical cable between this port and the remote peer device.

13

Configure the IP address on this port.

See the R80.20 Gaia Administration Guide - Chapter Network Management - Section Network Interfaces - Subsection Physical Interfaces.

MyAppliance> show configuration interface

set interface Mgmt link-speed 1000M/full

set interface Mgmt state on

set interface Mgmt auto-negotiation on

set interface Mgmt ipv4-address 172.19.184.183 mask-length 24

set interface Sync state off

set interface eth1-01 comments "1st Falcon-40G - Port 1"

set interface eth1-01 state on

set interface eth1-01 auto-negotiation on

set interface eth1-01 mtu 1500

set interface eth1-01 ipvi-address 1.1.1.1 mask-length 24

set interface eth1-05 comments "1st Falcon-40G - Port 2 - child 1"

set interface eth1-05 link-speed 10G/full

set interface eth1-05 state on

set interface eth1-05 auto-negotiation on

set interface eth1-05 mtu 1500

set interface eth1-05 breakout-mode 10G/full(breakout) force

set interface eth1-05 ipv4-address 5.5.5.5 mask-length 24

set interface eth1-06 comments "1st Falcon-40G - Port 2 - child 2"

set interface eth1-06 link-speed 10G/full

set interface eth1-06 state on

set interface eth1-06 auto-negotiation on

set interface eth1-06 mtu 1500

set interface eth1-06 breakout-mode 10G/full(breakout) force

set interface eth1-06 ipv4-address 6.6.6.6 mask-length 24

set interface eth1-07 comments "1st Falcon-40G - Port 2 - child 3"

set interface eth1-07 link-speed 10G/full

set interface eth1-07 state on

set interface eth1-07 auto-negotiation on

set interface eth1-07 mtu 1500

set interface eth1-07 breakout-mode 10G/full(breakout) force

set interface eth1-07 ipv4-address 7.7.7.7 mask-length 24

set interface eth1-08 comments "1st Falcon-40G - Port 2 - child 4"

set interface eth1-08 link-speed 10G/full

set interface eth1-08 state on

set interface eth1-08 auto-negotiation on

set interface eth1-08 mtu 1500

set interface eth1-08 breakout-mode 10G/full(breakout) force

set interface eth1-08 ipv4-address 8.8.8.8 mask-length 24

set interface lo state on

set interface lo ipv4-address 127.0.0.1 mask-length 8

... ... ...

MyAppliance>

[Expert@MyAppliance:0]# xlp_port_config

--help

--display

-s eth<Slot#>-<Port#> {10000 | 40000}

--reset

--help

Shows the built-in help

--display

Shows the current configuration

-s eth<Slot#>-<Port#> {10000 | 40000}

Configures the speed on the port:

• <Slot#> - Denotes the ordinal number of the front-facing I/O slot, which the acceleration card populates
• <Port#> - Denotes the main port on the card - 01 or 05
• 10000 - Configures 10 GbE to enable the breakout mode
• 40000 - Configures 40 GbE to disable the breakout mode

--reset

Resets the configuration (disables the breakout mode) on all ports of all acceleration cards to the default 40 GbE

1

Insert the supported Short Range transceiver into this port.

2

Connect to the command on the Security Appliance.

3

Log in to Expert mode.

4

Examine the current state of the Breakout Mode:

[Expert@MyAppliance:0]# xlp_port_config --display

5

Enable the Breakout Mode on the applicable interface (eth<Slot#>-01 or eth<Slot#>-05):

• [Expert@MyAppliance:0]# xlp_port_config –s eth<Slot#>-01 10000
• [Expert@MyAppliance:0]# xlp_port_config –s eth<Slot#>-05 10000

6

Connect the breakout cable between this port and the remote peer devices.

7

Reboot the Security Appliance:

[Expert@MyAppliance:0]# reboot

8

Connect to the command on the Security Appliance.

9

Log in to Expert mode.

10

Examine the current state of the Breakout Mode:

[Expert@MyAppliance:0]# xlp_port_config --display

11

Configure the IP addresses on the applicable "child" interfaces.

See the R80.20 Gaia Administration Guide - Chapter Network Management - Section Network Interfaces - Subsection Physical Interfaces.

1

Connect to the command on the Security Appliance.

2

Log in to Expert mode.

3

Examine the current state of the Breakout Mode:

[Expert@MyAppliance:0]# xlp_port_config --display

4

Disable the Breakout Mode on the applicable interface (eth<Slot#>-01 or eth<Slot#>-05):

• [Expert@MyAppliance:0]# xlp_port_config –s eth<Slot#>-01 40000
• [Expert@MyAppliance:0]# xlp_port_config –s eth<Slot#>-05 40000

5

Disconnect the breakout cable between this port and the remote peer devices.

6

Reboot the Security Appliance:

[Expert@MyAppliance:0]# reboot

7

Connect to the command on the Security Appliance.

8

Log in to Expert mode.

9

Examine the current state of the Breakout Mode:

[Expert@MyAppliance:0]# xlp_port_config --display

10

Connect the optical cable between this port and the remote peer device.

11

Configure the IP address on this port.

See the R80.20 Gaia Administration Guide - Chapter Network Management - Section Network Interfaces - Subsection Physical Interfaces.

Gaia Clish

Run one of these commands:

• show asset ac
• fwaccel stat

Expert mode

Run one of these commands:

• clish -c "show asset ac"
• fwaccel stat