Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos UTM HA failover and Stacked Cisco Switches | Cisco loses connection to Sophos after a failover

Hello Community.

I hope someone could point me to the right direction on this.

My setup:

Two Sophos UTM SG210 running active/passive
Two Cisco Stacked switches doing inter-vlan routing.
I have a LAG (two ports) on the UTM, and I have a LAG (4 ports) on the stacked cisco switches
I am routing all vlans in the Cisco out of a layer 3 LAG interface (10.10.8.2) connected to the LAG interface (10.10.8.3) on the Sophos. 

Problem:

Everything is working fine except when there's a failover on the Sophos, I lost connection from the UTM to the Cisco, and I would have to delete and re-create the LAG on the Cisco for connection to establish again. I understand in the post (referenced below) an engineer suggested to create two LAGs on the Cisco, but my question is, If I have two LAGs on the Cisco, how would I configure IP address and routing on the second LAG to route traffic to the Sophos?

Here's the post with same issue as mine:

community.sophos.com/.../sophos-utm-sg450-cluster----link-aggregation-group-failed-after-switching-cluster-status

Thank you in advance for you help.



This thread was automatically locked due to age.