WAN interface goes down every few days.

Hi Paul,

Place an unmanageable switch between the internet modem/Router and the XG and monitor the behaviour. Alongside, please show us the configuration for the failover rule, go to, Interface | WAN link Manager | IPv4 Gateway | Failover rules.

Take SSH access to the firewall and go to the Advance Console, execute the following command and show us the output.

ethtool -i Port# (here, # is the port number on which WAN is configured)

Show us the output.

Thanks

Hi Sachin,

Sophos XG is my firewall and router. I can't place anything in between. Maybe between internet cable modem and firewall?

Here is the info you requested:

I don't have another available gateway. Internet cable modem has only one entry and I don't have/need a second internet line.

Thanks for replying.

Paul

Hi Sachin,

Sophos XG is my firewall and router. I can't place anything in between. Maybe between internet cable modem and firewall?

Here is the info you requested:

I don't have another available gateway. Internet cable modem has only one entry and I don't have/need a second internet line.

Thanks for replying.

Paul

Hello All,

Same issue we are facing with XG 125 Appliance. Every few days WAN link going down.

Initially we have suspected with ISP, but ISP confirms there was no issue with their link.

Then we  have logged a complain with Sophos support team and they investigated with config files and some troubleshooting command. But did not found any abnormal.

At last they send us a new appliance. One week back we have installed new Appliance. Unfortunately again we are facing same issue.

Any one help us in this issue ?

Thanks in advance

Regards

Naveen.D 

Hi,

the link might not be failing but the device you are using to test the link availability might be going off  line.

Please change your link testing configuration in network -> WAN Link Manager. Use a different say DNS.

Ian

Hello,

Thank you for your reply.

In WAN link manager, by default its taken my ISP gateway for test the link. I am using single ISP link only.

So can i use any other reachable IP instead if link gateway for ping test ?

Kindly suggest

Regards

Naveen.D

Hi,

correct. I used to find the same thing, the ISP gateway would show fail but still pass traffic. I changed to a non ISP address. If you don't really want to know about link failures you can choose an internal address.

Ian

Hello,

Thanks again !

Changed IP with reachable ISP DNS. I will test it for couple of days and will share the results

Thanks and Regards

Naveen.D

Hi Naveen,

a little bit of extra information that might or might not help. Your ISP could have an automatic renew of IP address every couple of days which your XG if testing the default gateway would see as a fail.

Ian

Hello,

No, we are using static IP on wan interface.

Regards

Naveen.D

Hello All,

Again we are facing WAN interface down issue ?

Any help ?

Regards

Naveen.D

Hi Naveen,

please review your modem and see what the statistics for the link are? Looking for high error rate, no synch periods things like that?

Also how hot does your modem get?

Ian