Interface Issues

Hi,

a bit strange running a firewall on a PC with MS OS still installed on it?

How many interfaces does your PC have and what are the NIC chipsets?

Ian

Every OS switch included a full format of course. So it took some time to test these already :/.

I'm using 2 NICs with the following chipsets:

Intel(R) Ethernet I210-T1 GbE NIC
Intel(R) Ethernet Connection I217-LM

The ping monitors my LAN interface a random managed switch to check if the interface of my monitoring computer is the issue and the 1.1.1.1.

Hi,

things to check

1/. NIC is set to autonegotiate

2/. set to full duplex

3/. change to a different destination for ping check

4/. what do you see in the log viewer -> firewall and system tabs

Ian

I set the interface to full duplex now. The system tab in the log viewer definatly shows my problem.

Hi,

that shows that the interface is changing, but not why, maybe your switch is not set correctly or a faulty cable.

ian

I already used it with other cables on another switch with default settings on both switches so I don't think this is the issue. I changed it to full duplex like you recommended and I will monitor it now for a bit. Maybe this was the issue.

Thank you for you help, if the problem is fixed I will mark your posting!

Hello Ian,

Setting the interface to full duplex did not solve the issue. Do you have any other ideas?

Thanks in advance.

Hi,

what is the configuration of the switch port eg, there shouldn't be any other than a switch port?

Ian

I've also set the switchport to 1Gbps full duplex. STP is on Forwarding while the pingdrop happens.

The Switch is a UniFi Switch 8 POE-150W, the switch it was previously on was on a UniFi Switch 8 POE-60W.

I've also set the switchport to 1Gbps full duplex. STP is on Forwarding while the pingdrop happens.

The Switch is a UniFi Switch 8 POE-150W, the switch it was previously on was on a UniFi Switch 8 POE-60W.

Hi,

what does a tracert/traceroute show for you ping test address? The issue sounds very much like a configuration issue with a switch rather than the XG.

Ian

My monitoring PC is 192.168.100.1 while my firewall is 192.168.100.254. The LAN side of the Interface is going down (well with it ofc the wan side as well obviously, from the fw's viewpoint it stay's online). So it is directly connected (same subnet).

  1    <1 ms    <1 ms    <1 ms  fw.hostname [192.168.100.254]

Hi,

please post a screenshot of your LAN interface network configuration (detailed).

Ian

Hi,

please try changing your setting to auto negotiation.

If this doesn't have an effect, then we will ned to wait until one of the networking wizkids has a look.

Ian

I had it on auto until you said I should try to put it into full duplex.

Have it now on auto-negotiation back again and the error persists. I have found out that I can pretty easily reproduce it by doing 1-2 speedtests which puts the system under network load. The interface will instantly go down and up again.

Hello Ian,

I was able to fix the issue. It was a problem with the system states allowed in the BIOS. I had C1 up till C7 allowed to save power. I reduced it to only C1 is allowed. After that I had no issues anymore and the LAN interface wasn't going down anymore. Seems like Hyper-V has a different behavior then Sophos XG with these settings.

Thank you for your help.