Troubleshooting 10 Gb SFP+ transceiver detection (Sophos XGS 136)

Hi,

is the associated 1gb port in use?

ian

Hi,

Not sure what you mean by associated port. This is a free 10Gb port (Port F1) on the Sophos XGS 136 that I'm trying to configure for the very first time. As a starting point I'm trying to find log files (other than firewall) on the device that might indicate any issues or errors

John

On some xg hardware the 10gb port is shared with a 1gbt port.

ian

No prob. Not in this instance. 

I found that following options in CLI but it's not clear how to view an entire log or which one to detect hardware events. I only get a snippet

console> show logs
csc Show system controller logs
database Show database logs
firewall Show firewall rule logs
license Show system license logs
access_server Show access server logs
uma Show uma logs
fwmgmt Show system firmware management logs
logger Show logger logs
migration Show configuration migration logs
reportdb Show report database logs
sigdb Show signature database logs
init Show system initialization logs
syslog Show syslog

e.g. console> show logs syslog
Sep 5 04:03:20Z localhost kernel: [11778.555503] Port4: link up
Sep 5 04:03:21Z localhost kernel: [11779.662942] Port4: port speed change 1000 -> 10
Sep 5 04:03:21Z localhost kernel: [11779.671122] usfp: sending port speed change request for 1 ports
Sep 5 04:03:22Z localhost kernel: [11781.119765] Port4: link down
Sep 5 04:03:26Z localhost kernel: [11784.704122] Port4: link up
Sep 5 04:03:27Z localhost kernel: [11785.905317] Port4: port speed change 10 -> 1000
Sep 5 04:03:27Z localhost kernel: [11785.911487] usfp: sending port speed change request for 1 ports
Sep 5 04:10:42Z localhost kernel: [12220.653185] Port3: link down
Sep 5 04:12:11Z localhost kernel: [12309.239817] Port3: link up
Sep 5 04:16:00Z localhost cish: session opened from console

Hello John Giovannis,

Thank you for reaching out to the community, please verify SFPs compatibility list: https://support.sophos.com/support/s/article/KB-000037169?language=en_US

XGS136 has only SFP Port. Not SFP+. So you want to use the 10 Gbit/s port as a 1 Gbit/s port? 

Hello John,

Ports F1 and F2 on a XGS 136 are SFP-Ports (without +), so they will only accept 1 GBit SFP transceivers.

There is a known issue with auto-negotiation on SFP-ports, so you should manually configure this to the same settings on both ends.

Hi Philipp,

Thank you for your answer. Interestingly the 3rd party vendor that sold me the unit even quoted with 10Gb SFP+ transceiver (ITFZTCHXF) so I've incorrectly assumed it supports 10Gb connections.

When I look at the advanced settings of each physical port, the highest speed I can see is 1000Mbs Full-Duplex (Ports 1 to 12 and Port F1 and F2)

However if I go to  https://www.sophos.com/en-us/products/next-gen-firewall/tech-specs#XGSDesktop I can see that some models support 10Gb copper ports.

I can't tell for sure if the model I have can support 10Gb connections, other than what I can see in the advances settings

John

Hello John,

you misread this: it is 10x GE ports, that is ten ports with 1GBE on a model XGS136

Great. Thanks for pointing that out. Looks like I have to get an 1Gb SFP transceiver after all to use ports F1 and F2