Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SG230 in HA setup: Uplink balancing not working.

Hi,

I'm trying to get Uplink balancing working with one of our clients.

Client in question is using two SG230 units working in a HA setup. Firmware level 9.404-5.

We have two WAN lines: 

One VDSL line which terminates on a AVM FritzBox Router. This router is defined as the default gateway in the advanced settings of the ETH0 nic.

One SDSL line which terminates on a Cisco router which is provided to us by our ISP Deutsche Telekom. 

The Cisco router is connected to both SG230 units to NIC ports ETH2 using a simple, unmanaged switch. 

I added ETH0 and ETH2 as active interfaces in the Uplink balancing tab. I didn't create any Multipath rules, first wanted to make sure that automatic balancing works as expected.

And well..it doesn't! At first everything seems to be working fine, using the flow monitor I can see that there is indeed traffic going through both interfaces.

The problem is, that it only works for a few minutes and then everything is dead...no client on the network can connect to the internet at all.

As soon as I specify ETH2 as a Standby interface, everything is working fine again.

I tried numerous things, among them trying to specify ETH0 as a Standby interface which rendered my whole HA setup completely unusable since this deactivated the ETH0 interface completely...fun times, had to restore from backup since there didn't seem to be any way to reenable the ETH0 interface.

I'm open to all suggestions at this point!

Thanks in advance,

Dominik



This thread was automatically locked due to age.
Parents
  • This is unusual, Dominik, so I suspect hardware.  What happens if you put eth0 into Standby and leave eth2 in Active?  If there's still a problem, I would change the relevant Ethernet cables first, then the switch and, finally, ask DT to change the Cisco.

    On second thought, this situation seems oddly familiar to me...  Before asking DT to replace the Cisco, try the steps in #7 in Rulz first - especially the MTU and fixed speed/duplex settings.

    Any luck with any of that?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • This is unusual, Dominik, so I suspect hardware.  What happens if you put eth0 into Standby and leave eth2 in Active?  If there's still a problem, I would change the relevant Ethernet cables first, then the switch and, finally, ask DT to change the Cisco.

    On second thought, this situation seems oddly familiar to me...  Before asking DT to replace the Cisco, try the steps in #7 in Rulz first - especially the MTU and fixed speed/duplex settings.

    Any luck with any of that?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?