Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 26 replies
  • Subscribers 28 subscribers
  • Views 9486 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Failover WAN not failing over

M8ey

Hey guys,

 

So I have 2 WAN links - one is Active and one is Backup - set to failover if the Primary fails by TCP not hitting 4.2.2.2 on Port 80 after 5 sec.

My Primary WAN port is Port 3 and shows Disconnected

My Back up Port is Port 8 and shows Connected

 

No matter what I try I cannot get the XG to failover to the backup connection.

Even swapping Active and Backup will not make them work.

 

In the FW rules I have  Primary and Secondary connection but they should fail over.

 

What am I missing?



This thread was automatically locked due to age.
Parents
  • 0

    Hi 

     

    Try to keep the WAN link load balance in the Firewall rule and see if that works. It's interesting that traffic does not pass through the Port8 when Port3 is down. Have you created any additional static routes or advanced firewall rules in the backend?

  • 0 in reply to Jaydeep

    Jaydeep said:
    WAN link load balance in the Firewall rule and see if that works.

     

    Hey Jaydeep - yes we tried that as well. Sophos support even created a rule and tried all they could.

     

    I strongly believe its an issue with two PPPoE connections and how the XG handles a change such as failover. This XG used to have a Static and a PPPoE and it has failed over fine.

    A few updates and a change to WAN and no failover.

    Another Level 2 session booked for Monday night

  • 0 in reply to rfcat_vk

    I still think we have different issues.

     

    My Failover PPPoE is connected and incoming connectivity is available  i.e the RED reconnects to the backup fine.

     

    My issue is more from LAN - WAN - no traffic passes and I get a VIOLATION error. The FW rules that are required are correct but it wont pass traffic like the NAT is broken

  • 0 in reply to M8ey

    That describes my issue exactly.

    Ian

  • 0 in reply to rfcat_vk

    Then as we wrap up tonight I will disable then reenable the backup pppoe and see if it connects

  • 0 in reply to M8ey

    Just to add a little more fuel to the fire it is an IP4 issue, the IPv6 interface comes up correctly looking at the email messages.

    Ian

  • 0 in reply to rfcat_vk

    Another 3 hours in a Comms room failing over for sophos to take log files.

    No update as yet except its still broken.

     

    I did try editing the PPPoE interface but no change. Maybe it fixes yours as you are DHCP where I am Static.

  • 0 in reply to M8ey

    Sad that doesn't work for your setup. It fixed mine when I had PPPoE, DHCP and static as well as DHCP FTTC.

    Also doesn't happen not e UTM, just XG.

    Ian

  • 0 in reply to rfcat_vk

    Hi,

    this morning being a little brave decided to see if I could emulate your issue, so I set my UTM to be a pretend ISP. he interfaces were all set to static IPs.

    All my tests passed.

    Tests were

    running speediest.net application

    1/. disable the interface on the UTM - successful failover

    2/. disable the alternate interface and enable the main interface - successful fail over

    3/. disable MASQ on UTM so link looks like it is up but fails wan link failover test - successful failover

    4/. disable alternate MASQ on UTM - successful failover

     

    Though one application speediest.net (application not web site) now refuses to connect regardless of interface being used.

    Ian

    Just reviewed the firewall rule for the speediest.net application to find out why it worked and found I had left the default WAN load balancing setting in place.

  • 0 in reply to rfcat_vk

    Hmmm I am not sure why mine doesn't failover.

     

    Has to be some combination of my two PPPoE or ISP upsetting the XG.

    Its from the LAN side being blocked so definitely the XG.....

     

  • 0 in reply to M8ey

    Hi M8ey.

    did this ever work?

    Using 8.4.4.4 as a ping test has quite significant delay from my network over 100ms whereas 1.1.1.1 is under 10ms.

    I seem to remember sometime way back is XG first launch something about two PPPoE connections not working correctly, but cannot remember any specifics.

    Of course my testing was all done using ethernet connections not PPPoE.

    Ian

  • 0 in reply to rfcat_vk

    rfcat_vk said:
    did this ever work?

     

    Sure did - back when it worked my Primary was Static and the failover was PPPoE.

Reply Children
No Data