Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 1102 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Error with OSPF route

Tri Nguyen2

Hi Sophos.

I have configured Sophos Firewall OSPF with Cisco via a leased line .

two sites can ping each other. Sophos Neighbor ospf table have information about cisco 

The problem is that when i turn on ospf route in Sophos firewall. I have tested ping on the Sophos site. Ping  will drop 50%-75% of the packet and reply time from 2000ms to 3000ms , when i ping lan network or isp ip.

Log view table shows a lot of drop packets from 0.0.0.0 to 0.0.0.0  with a message. "ip packet with invalid header version "

when i turn off ospf. ping with isp and lan network is ok.

does anyone have idea what is that with ospf?




This thread was automatically locked due to age.
  • 0

    Hi Tri Nguyen2

    Thank you for reaching out to the community, below is the link to verify the configuration to connect sites with OSPF : 

    https://support.sophos.com/support/s/article/KB-000036328?language=en_US 

    Thanks and Regards

    "Sophos Partner: Infrassist Technologies Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

  • +1

    Hi Tri Nguyen2

    Please share output for the following : 

    Please get access to CLI as per the link . Go to Option 3 (Route Configuration) > Option 1 (Configure Unicast Routing) > Option 2 (Configure OSPF). Turn on OSPF by running the command console > enable.

    ospf(config-router)# show running-config

    From option 4 : 

    Run the command tcpdump 'proto 89'

    Run the command tcpdump 'host 224.0.0.5'

    Check any drop from Sophos XG or not 

    console>drop-packet-capture 'host <destination IP> and proto ICMP

    From GUI 

    Go to Configure > Routing > Information and verify the configuration of the following:
     

    Expand the field to verify configuration is fine or not 

    Thanks and Regards

    "Sophos Partner: Infrassist Technologies Pvt Ltd".

    If a post solves your question please use the 'Verify Answer' button.

  • +1 in reply to Bharat J

    I have found the issue. it is the isp fault. thank you mr Bharat J

Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?

Unfiltered HTML