Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 25 replies
  • Subscribers 37 subscribers
  • Views 16924 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG210 rev3 sudden restart

Adam Zollenkopf2

Hi all,

I've got a really strange problem which I can't make sense of. My XG210 rev3 is randomly restarting. This device is heavily overspec'd for it's application (15 computers, single internet service) and doesn't appear to have any hardware issues.

This device sometimes goes several days without issue, sometimes only a few minutes. There is nothing in the log to indicate a problem, it simply looks like a power drop.

What I have discovered today though is, the restart happens every time my work laptop comes online (Dell Latitude E7470). There are no doubt other devices on my network which are triggering the restart aswell, as it happens when my work laptop is off, but only every few days.

I have been able to make the XG210 restart 5 times this morning without 30 minutes, simply by restarting my work laptop 5 times.

I'm running SFOS v17.5 MR6, but it was also happening with MR5. I haven't used it with any firmware versions older than SFOS v17.5 MR5.

Any ideas?



This thread was automatically locked due to age.
Parents
  • 0

    Hi Adam,

    We have a very similar situation (you would need to confirm it is the same) which has unfolded at one of our clients. We have replaced the XG210 rev 3 - 3 times & it did not fix the problem. Basically the XG210 would work for a while and then at a random point just start to reboot.

    We got the following output when connected to the console port.

    [ 101.065885] Kernel panic - not syncing: Fatal exception in interrupt
    [ 101.084990] Kernel Offset: 0x0 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffff9fffffff)
    [ 101.115562] Rebooting in 3 seconds

     

    We have been advised the workaround is to disable hardware acceleration as below

    - Log on XG firewall SSH terminal using admin account. Once authenticated, you will be presented with the Sophos Firewall console menu.

    - Go to 5. Device Management > 3. Advanced Shell, and run the following commands

    cish

    system firewall-acceleration disable

     

    Solution is to upgrade XG firewall to firmware version 18 GA which will be available next year.


    At present there is no KB for the issue, as Sophos claim there is less than 10 XG firewalls globally were affected the following kernel panic & the issue is not limited to the XG210.

    Hope this is of some assistance

    Cheers
    Adam

  • 0 in reply to Adam Rippon

    Hi Adam,

     

    thank you for that information. As there were a reboot again this morning I disabled the firewall-acceleration and add a console logging in addition. 

    Up to now, it works stable. Let's wait some days.

     

    10 XGs globally... funny.

  • 0 in reply to Sven Schaffranneck

    Now is the time to put a high tech power analyzer before your firewall.  And it is also the time to install an additional Faraday cage around your firewall (temporarily off course)

    Power analyzer should be evolved enough to read most harmonics.  And it should come with a tech who knows how to use it.

    Faraday cage would tell you if these problems come from any form of wireless communication.  Like Motorolas Walkie-Talkie.  Don't laugh. We got that problem 10 years ago with HP servers.  They were randomly rebooting.  Support service were using Motorola radios.  We tried to locate that problem for months up until I noticed an HP printer was trowing a blank sheet every time the tech was talking over the air.  We forbidden those radios anywhere nearby.  Problem solved.  It turned out that we could talk with the radios as long as we were at least 8 foot away from any devices.

    Desperate problems requires desperate solution I suppose.

    My 2 cents.

    Paul Jr

  • 0 in reply to Sven Schaffranneck

    Since last msg...We have had another 2 sites affected by this issue.

    So far all have been on firmware 17.5.8 and disabling firewall acceleration has been the solution.

    Definitely more than 10 firewalls worldwide!!!

Reply Children