Page 1 of 1

Device Failure to a Secure State

Posted: 27 Aug 2021 11:06
by mjgrossman
Hello all, it's been a while since I've posted to the forum - hoping someone else out there has had to address the following security concern before.

We are trying to address a requirement that the switch is configured to "fail to a secure state in the event that system initialization fails, system shutdown fails or an abort fails."

From review of Alcatel documentation, it does not appear that there is a "fail securely" feature. I am trying to determine if device supports anything similar to what we've configured on various firewall devices for 'System Fail Closed' which prevents any traffic from being forwarded in certain failure/reboot/reload scenarios.

Any help is greatly appreciated!

Re: Device Failure to a Secure State

Posted: 31 Aug 2021 03:10
by silvio
Never heard about this feature. If the switch can't initialize (or reboot/reload) at the start than all ports are still down.
For other things you can create your own internal python scripts to shutdown ports (or disable vlan etc.). But it is difficult for me to understand which event you will use as trigger for this script.
BR Silvio