Sophos RED disappeared

Hello there,

Thank you for contacting the Sophos Community.

Most likely you have configured a DHCP server using the DCHP of the Firewall instead of the DHCP within the RED, try deleting the DHCP from Network >> DHCP 

Regards,

Hi the only DHCP I have in Network is the one for the firewall which uses the br0 interface. I did add the RED to the br0 interface so that it can get onto the LAN though.

Hi, please read this, maybe you have only one or two RED and are affected by this bug:

RED List disappears with more than one dynamic DHCP range configured (NC-77642)

https://community.sophos.com/sophos-xg-firewall/f/discussions/130164/red-list-disappears-with-more-than-one-dynamic-dhcp-range-configured

Hi,

I don't have multiple DHCP ranges in the same subnet. I have one range for the firewall and one range for the guest WiFi.

I have one RED 20 connected to my XG 125w firewall running the latest OS v19 MR1.

I have tried turning off the guest Wifi DHCP range and the RED does not reappear.

Hello Charles,

Thank you for the additional info.

So this is the only RED device that connects to the XG?

Can you turn off momentarily the DHCP for the bridge? and enable and see if t hat fixes this.

If not, run the following command from the Advanced Shell of the XG (5>3)

Obscure the mac, red_id and Public IP, and don't need the output of the certificates, mostly concerned with the dhcpstatus output. 

Regards,

Hello Charles,

Thank you for the additional info.

So this is the only RED device that connects to the XG?

Can you turn off momentarily the DHCP for the bridge? and enable and see if t hat fixes this.

If not, run the following command from the Advanced Shell of the XG (5>3)

Obscure the mac, red_id and Public IP, and don't need the output of the certificates, mostly concerned with the dhcpstatus output. 

Regards,

Hi,

what command do I run in the advanced shell?

Turning DHCP off and on again didnt bring the RED back.

please try to delete the DHCP Server on the bridge, note every setting and recreate it afterwards. Maybe disabling is not enough.

Not a solution, just debugging to find out where the issue is.

emmosophos you missed te command and pasted something else

Hello Charles,

Thank you for the follow-up.

Sorry about that:

psql -U nobody -d corporate -c "select * from tblreddevice" -x

Regards,

Hello LHerzog,

Thank you for the mention.

Regards,

deviceid | 1
status | 1
state | runnable
tunnel_state | 1
name | reds1(RemoeName)
branchname | RemoteName
description | RED20
mac | REDACTED
debug_level | 0
type | red20
deployment_mode | online
red_id | 
unlock_code |
prev_unlock_code |
authorized | 1
hub_hostname | IP Redacted
hub2_hostname |
uplink_mode | dhcp
manual_address |
manual_netmask |
manual_defgw |
manual_dns |
uplink2_mode |
manual2_address |
manual2_netmask | 255.255.255.0
manual2_defgw |
manual2_dns |
uplink_balancing |
hostname_balancing | failover
route_mode | default
mac_filter_entries_red10 | 200
mac_filter_entries_red50 | 400
mac_filter_list |
mac_filter_type | none
activate_modem | 0
mobile_network | gsm
password |
username |
pin |
dial_string | *99#
apn |
umts_state | READY
lanport_mode |
lan1_mode |
lan1_vids |
lan2_mode |
lan2_vids |
lan3_mode |
lan3_vids |
lan4_mode |
lan4_vids |
tunnel_compression | 1
tunnel_compression_algorithm | lzo
bridge_proto | none
bridge_address | 0.0.0.0
bridge_netmask | 24
fullbr_dns |
hardware |
dhcpstatus | 1
tunnel_id | 1

I have not yet had chance to delete and recreate the DHCP.

Hello Charles,

Thank you for the output.

So it does look like you have enabled the DHCP in the RED device, dhcpstatus | 1, which I believe caused the issue.

Regards,

Hi,

ok, how do I turn that off and what will happen when I do that?