Losing DHCP Gateway

So far I have not had a dhcp or internet problem since changing dhcp to the "old" method.

Maybe i can tell more about this issue. 

It seems like, in special race conditions, XG is not able to generate for a Client the correct Gateway / DNS Server and only provides a IP.

The new mode is designed to get "faster and reliable" DHCP Servers in XG. 

It seems like, smaller Appliances are struggling with this mode, as far as i can tell. 

Observed this issue only on smaller Appliances / networks.  

Maybe you guys can actually post your Appliances, you observed this issue.

Please (Plus XG Home) 

I have 3 in use:

XG105rev 2: At customer A, with more users then it should be able to handle, 42 computers and tons of site to site vpns...kinda always had to turn off certain services that aren't critical. Had it running 16.5.8 mr 8 for 2 years, never any issues with DHCP.

XG 105w rev3: I temporarily placed this on-site at customer A a few weeks ago with the same configuration (i did a backup restore) because I wanted to give the latest firmware a try to see if I can upgrade. New unit in place seemed fine so I decided to leave it there for a few days. Well, next morning at open of business, they called me and had no internet due to the DHCP renewal not passing a default gateway. Keep in mind this hardware is much better then the rev2 was. This tells me it has to do with v17 something out introduced like new DHCP method.

XG210 rev3: I replaced xg105 last week with this nice 210 v3 but to be sure I wouldn't run into issues i ran the dhcp old command right away.  So that doesn't help much i guess. If i had a weekend soon where i could switch back to DHCP new and watch what happens i will.

Hi,

I ended changing all my DHCP leases to longer time to live and that for me seems to fixed the problem.

Ian

Do not forget it goes back to new mode after a firmware upgrade.

Paul Jr

I have 2 XG Home devices which are having issues with new dhcp. One is Intel Celeron 3865u and 2nd one is a i3-7100u. Both have 8GB RAM and 128GB SSD.

They both serve a /26 network

Did you try system dhcp conf-generation-method old at the command line?  Still working for a week later.

This issue has now been resolved in SFOS v17.5.8:

https://community.sophos.com/products/xg-firewall/b/blog/posts/sfos-17-5-mr8-released

• NC-48031 [Interface Management] Wifi client did not get gateway and other config after reboot until enable and re-enable the wifi on client

hi,

i hope this will do the trick, as none of my clients having this probleme were wifi !

Changing the dhcp to the old method using the command line console is still working for me a month later.  I can see how increase the lease team would work also.

Nevertheless should the DHCP "new" Mode work after updating to MR8. 

Will try this today at a customers site using a XG 135. Hopefully this will fix it.

We have many XG's with this problem and I contacted Sophos Support and told them the problem and asked if they had any other customers with this issue, and the just bluntly say that the did not, even when I also included this thread it the ticket.

I find it very frustrating that Sophos Support does not have a clue what is going on at their customers XG's, and even more so that they are not communicating with their devopment team about known issues.

Every issue seems new to them and they act like it is some strange exotic issue. I never had a Sophos Support employee tell me that some issue is known and they are working on it.

Will try this today at a customers site using a XG 135. Hopefully this will fix it.

We have many XG's with this problem and I contacted Sophos Support and told them the problem and asked if they had any other customers with this issue, and the just bluntly say that the did not, even when I also included this thread it the ticket.

I find it very frustrating that Sophos Support does not have a clue what is going on at their customers XG's, and even more so that they are not communicating with their devopment team about known issues.

Every issue seems new to them and they act like it is some strange exotic issue. I never had a Sophos Support employee tell me that some issue is known and they are working on it.