topic TAP mode interface drop in General Topics

TAP mode interface drop

animofernando — Tue, 13 Mar 2018 02:03:36 GMT

Hi. I have a question about TAP deployment

I set the TAP mode which I used just one interface, set the zone TAP

Security policy TAP-TAP any any permit.

Then, regularly I'm checking the global counter, but I don't know why the drop packet occured.

When I checked first at the 'packet capture' on the firewall, then I could see some packets are dropped.

Some UDP protocl, IP fragmented packets are dropped, and I don't know why this situation happend.

Is there anyone why this is events occured?

Help me out for finding answer.

Re: TAP mode interface drop

reaper — Thu, 15 Mar 2018 12:00:40 GMT

The TAP interface is a 'listening'; interface, this means it does not send packets out, so after receiving and analysing packets, it discards them

Re: TAP mode interface drop

BPry — Thu, 15 Mar 2018 14:34:13 GMT

As @reaper mentioned this is expected when you are running a TAP interface. It kind of sounds like you may be looking for a Virtual Wire deployment over a TAP deployment.

Re: TAP mode interface drop

animofernando — Fri, 13 Apr 2018 11:32:47 GMT

No, I just wanted it to know about TAP interface feature. I got the answer from @reaper. Thank you 😄