phase 1 and phase 2 have been established

negotiates through the IKE V2 protocol

VPN instance name is public

IPSec SA status is Ready

When the interface is in the non-bypass state, the traffic flows from the GE0 interface to the USG through Router_a. After the USG processes, the traffic flows from the GE1 interface to Router_B.

When the interface is working in the Bypass state, the traffic is forwarded from the GE0 interface to the USG. The USG does not pass any processing and flows directly from the GE1 interface to Router_B.

When the firewall is configured to implement the security priority, the uplink and downlink services are not interrupted when the interface works in the bypass state. Therefore, the device can be kept in the Bypass state.

The electrical bypass interface can only work in Layer 2 mode and has circuit bypass function.

down

init

up

AdminUp