TAP mode interface drop

L2 Linker

TAP mode interface drop


Hi. I have a question about TAP deployment


I set the TAP mode which I used just one interface, set the zone TAP

Security policy TAP-TAP any any permit.


Then, regularly I'm checking the global counter, but I don't know why the drop packet occured.

When I checked first at the 'packet capture' on the firewall, then I could see some packets are dropped.

Some UDP protocl, IP fragmented packets are dropped, and I don't know why this situation happend.


Is there anyone why this is events occured?

Help me out for finding answer.



Community Manager

Re: TAP mode interface drop

The TAP interface is a 'listening'; interface, this means it does not send packets out, so after receiving and analysing packets, it discards them

Help the community: Like helpful comments and mark solutions
Reaper out
L7 Applicator

Re: TAP mode interface drop

As @reaper mentioned this is expected when you are running a TAP interface. It kind of sounds like you may be looking for a Virtual Wire deployment over a TAP deployment. 

L2 Linker

Re: TAP mode interface drop

No, I just wanted it to know about TAP interface feature. I got the answer from @reaper. Thank you :D 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!