This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

RED15 drop

cyber2016 over 10 years ago

Hi,

My setup is below:

UTM 9.351-3

RED15 in location in Transparent / Split, set to DHCP

in the main office when the Internet drop for a seconds then we can't connect to the RED device anymore. it has to be rebooted.

Is there any way to fix it?

This thread was automatically locked due to age.

Parents

0 JanGross over 10 years ago

Same here... We recently deployed several RED 15, the issue occurs sometimes and with no informative log entries at all. The tunnel comes up, all PING/PONGs in the RED-Log are ok. But the subnet behind the RED is not reachable. Whilst a reboot of the RED solves this for the moment, we discovered a workaround on the UTM-Site to reestablish a working tunnel:

- Disable the RED (tunnel drops)

- Disable the Interface associated to this RED

- Wait several seconds

- Re-enable the Interface

- Re-enable the RED

The tunnel comes up and everything works.

We will open a call to SOPHOS regarding this. Maybe you can do the same, to increase the pressure ;-)

Regards, Jan
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 JanGross over 10 years ago

Same here... We recently deployed several RED 15, the issue occurs sometimes and with no informative log entries at all. The tunnel comes up, all PING/PONGs in the RED-Log are ok. But the subnet behind the RED is not reachable. Whilst a reboot of the RED solves this for the moment, we discovered a workaround on the UTM-Site to reestablish a working tunnel:

- Disable the RED (tunnel drops)

- Disable the Interface associated to this RED

- Wait several seconds

- Re-enable the Interface

- Re-enable the RED

The tunnel comes up and everything works.

We will open a call to SOPHOS regarding this. Maybe you can do the same, to increase the pressure ;-)

Regards, Jan
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BAlfson over 10 years ago in reply to JanGross

Hi, Jan, and welcome to the UTM Community!

In the RED sites, ask your ISP to set their equipment to do 100 Mbps full-duplex. Any luck with that?

Cheers - Bob

EDIT I just read your post in German, and the additional info there would seem to confirm my suspicion about an interaction with your ISP's equipment.

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 JanGross over 10 years ago in reply to BAlfson

Thanks for your reply...

Actually the REDs are connected via 1 GBit/s to the Router. Fortunally I can change that remotely.

Will try on one site and watch the behaviour.

Regards, Jan
Cancel
Vote Up 0 Vote Down

Cancel
0 Danscho over 10 years ago in reply to JanGross

Hi Jan.

Do you have any news regarding this issue?
I am experiencing a similar behavior and it drives me crazy.

Best regards,

Daniel
Cancel
Vote Up 0 Vote Down

Cancel
0 JanGross over 10 years ago in reply to Danscho

Since switching to 100 Mbps didn't change the behaviour, we contacted Sophos Support. They reply, that the problem is known and will be fixed in upcoming UTM 9.4, which is already released for manual installation. Up2Date-Install is expected for early April.

Hope that will fix it.

Jan.
Cancel
Vote Up 0 Vote Down

Cancel
0 Danscho over 10 years ago in reply to JanGross

Ok, that sounds promising.

Thank you for your quick reply (and for the UTM side solution, I never got it running again without a firewall reboot).

Best regards,

Daniel
Cancel
Vote Up 0 Vote Down

Cancel