Sophos Firewall

Discussions Packet Losses at the LAN Gateway

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 8 replies
Subscribers 28 subscribers
Views 3762 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Packet Losses at the LAN Gateway

Kevin Juma over 5 years ago

Hi Guys,

I have a Sophos XG 430 configured as both stateful firewall and DHCP server routing all VLANs.

For some reason I seem to have lots of packet loss at the LAN gateway interfaces as shown below;

Any ideas why this is happening?

This thread was automatically locked due to age.

Parents

0 Keyur over 5 years ago

Hi Kevin Juma

Please access the XG firewall over the console and execute the command show network interfaces and check for errors for LAN port.

You may check with Interface Speed from GUI.

Please also connect the user system directly to the LAN port bypassing switch and check whether the loss is there or not.
Cancel
Vote Up 0 Vote Down

Cancel
0 Kevin Juma over 5 years ago in reply to Keyur

Hi,
Check the ports and the main port has errors as below;

Port10 Zonetype:LAN MAC Address:7x:xA:1C:x7:x8:C4 MTU:1500
IPv4 Addr(s): 192.168.2.254/24 Bcast:192.168.2.255
IPv6 Addr(s): fe80::7e5a:1cff:fe57:38c4/64 (link-local)
Speed:10000Mb/s Full Duplex
UP BROADCAST RUNNING MULTICAST
RX State: packets:7129897420 bytes:3725536111594 (3.3 TiB)
errors:1236669 dropped:0 overruns:0 frame:1236669
TX State: packets:13243340807 bytes:14383345112944 (13.0 TiB)
errors:0 dropped:0 overruns:0 carrier:0

So how do we fix this? Replace the Ethernet cable?
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Kevin Juma

IF even the linux output shows such errors, maybe follow the common practices: https://serverfault.com/questions/185331/exact-meaning-of-rx-errors-and-frame-in-ifconfig-output
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Kevin Juma

Hi,

you appear to be running 10gb/s over what sort of cable?

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 5 years ago in reply to Kevin Juma

Hi,

you appear to be running 10gb/s over what sort of cable?

Ian
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Kevin Juma over 5 years ago in reply to rfcat_vk

Hi,

This is 10G over a fiber cable
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 5 years ago in reply to Kevin Juma

Kevin,

did you check your switch log file? If you are using fibre optic on XG also, the module can be broken. I rember a number of case where the fibre slot on XG was broken. Do you have any other slot?

Try also to change the jbic on XG and on switch too.

Let us know.

Regards
Cancel
Vote Up 0 Vote Down

Cancel