This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Urgent, Strange but quick question

We're having a VERY strange situation on a remote office the last weeks.

One ASG220 HA setup disappeared for us, and no people on site.
After approx a week !!!, It re-appeared again....for 2 hours, and then gone again.

During the time it was up/reachable, I could surf into webadmin, and uptime, etc was NOT pointing to any issues. It had been up for approx 2 months since last update.
So, from there, we tried talking to the ISP who keep stating that the connection IS up and they can't see any problems.

And, now, here's the intresting/funny part;
According to the ISP (Today), they can see the Mac-Address OK with trafic going in and out. Mac-address "00-17-c5-68-7c-f9"

That serie; 00-17-c5,,etc,, is SonicWall ???

We are 100% sure that WE do not have a SonicWall, so,
either it would be the Astaro using some kind of faked mac-address which sounds very unlikely ??,,, or else, someone in the same building has hi-jacked the connection to the internet somewere else in the building but outside the office.

That sounds unlikely to though since it would require that "someone" to know ipaddress, mask, gate, etc to be able to bypass our Astaro and put in their SonicWall instead...


So,, (sorry for long message) the question really is;
Is it in ANY way possible for a ASG220/HA to be seen as a SonicWall box 
with that mac-address ??


This thread was automatically locked due to age.
Parents Reply Children
  • Are you using DHCP on any of these WAN interfaces? I've seen situation where cable modem service providers that get their DHCP reservation tables scrambled for customers who are supposed to have "static" (technically, it's DHCP with a reservation that should never change) IPs ... their IPs change unexpectedly.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Also.... just to see, I looked at a couple of different ASG220 Rev.2 and Rev.3 boxes... all had MAC addresses that started out as 00:1a:8c  ...  so not likely for that range to be any different.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.