Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 27 subscribers
  • Views 13250 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SNMP responses very slow WHEN multiple WAN links

EddyMinet

Have have just configured a new XG115 device.

There are 2 DSL links on the device, one is a very good vdsl link (90Mbps).

Everything works great : very good ping time, very good troughput.

But, when I make a SNMP request, the response take about 2 seconds to come back. When I make a SNMP walk from my monitoring server to gather interfaces descriptions, it tooks more than 1 seconds per line so about 20 seconds to end.

SFOS is 16.05.1 MR-1 and I have other XG appliances that do not have this issue (even with very smallest Internet links)

I cannot figure what can be the problem, the configuration is very basic, no anti dos, no anti spoofing ...



This thread was automatically locked due to age.
  • 0

    I have the same issue on another XG115. The common point is that both have 2 WAN in load balancing mode (active/active)

  • 0

    I can now confirm that the issue exists when multiple wan link :

     

    - SNMP ifDescr walk on an XG125 with only one WAN interface : ~1 second

    - SNMP ifDescr walk on an XG125 with 2 WAN interfaces : 51 seconds (ends with a timeout on the 22d interface retrieve)

     

    When converting an XG from 2 WAN to single WAN, problm disapear.

  • +1

    We just found a workaround for this awesome bug.

    You just need to create a static route like this:

    Destination IP / Netmask: x.x.x.x (where x.x.x.xisy the IP of your SNMP collector)

    Gateway: y.y.y.y (where y.y.y.y is the gateway of the wan interface you want to use to talk with your SNMP)

    Interface: y.y.y.z (y.y.y.z is the "exiting" interface)

    Distance: 0

     

    By doing this you'll enable the packet directed to your SNMP collector to "pass" from the selected interface, removing the high response time problem.

    Enjoy

    Digital Network, Florence, Italy

  • 0 in reply to Federico Pancani

    Thanks for help, this workaround works !

    For a PPP Gateway, /32 adressed, left the 'gateway' field empty