Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +10 person also asked this people also asked this
  • Locked Locked
  • Replies 82 replies
  • Subscribers 62 subscribers
  • Views 52692 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[BUG] XG v16/17 PPPOE doesn't endlessly tries to reconnect

guillaume bottollier

Hi All,

i have a weird issue concerning clients with xDSL lignes, with a modem bridged and connected to wan port of the XG.

There are more and complains about internet failures (different clients, different DSL providers, different modems), and in most of the cases the pppoe Wan port status is "Disconnected".

Just by clikcing on "connect" connection goes up immediatly !

Is there a way to force the XG to retry enlessly to reconnect ?! (which should be a basic thing !!!!)

Thanks !



This thread was automatically locked due to age.
Parents
  • +1

    Hello All,

    If you are experiencing issues related to this, please raise a support case mentioning the tracking ID NC-62029 and also PM me with your support case number for further investigation and follow up.

    As a temporary workaround you can perform the following:

    • Set a specific time when the PPPoE link reconnects (May work for certain situations)
    • Manually save the PPPoE configuration or connect manually from the UI

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • 0 in reply to emmosophos

    Hi,

    I haven't tried this yet as if i broke it an onsite visit would be required to resolve and that isn't possible at the moment (thanks COVID19!), but one idea I had was to inject "persist maxfail 0" into the pppd commandline, which would keep pppd running and forever retrying to reconnect instead of exiting after a link failure and having XG manage the reconnection (which is where this is going wrong). This could be done like:

    mount -o remount,rw /
    mv /usr/bin/pppd /usr/bin/pppd.orig
    cat <<EOF >/usr/bin/pppd
    #!/bin/sh
    /usr/bin/pppd.orig $@ persist maxfail 0
    EOF
    chmod +x /usr/bin/pppd
    mount -o remount,ro /

    The above is completely untested though, so could contain all kinds of typo's and other errors. Also, XG expects pppd to exit after a connection failure so it can clean up the old connection etc, so having pppd hang around and create a new ppp session when XG doesn't know this is happening could upset things and introduce all kind of strange behaviors, especially if you have a dynamic IP (do ISP's still do that?).

    And of course Sophos Support won't want to touch your device if you've been tinkering!

    James

Reply
  • 0 in reply to emmosophos

    Hi,

    I haven't tried this yet as if i broke it an onsite visit would be required to resolve and that isn't possible at the moment (thanks COVID19!), but one idea I had was to inject "persist maxfail 0" into the pppd commandline, which would keep pppd running and forever retrying to reconnect instead of exiting after a link failure and having XG manage the reconnection (which is where this is going wrong). This could be done like:

    mount -o remount,rw /
    mv /usr/bin/pppd /usr/bin/pppd.orig
    cat <<EOF >/usr/bin/pppd
    #!/bin/sh
    /usr/bin/pppd.orig $@ persist maxfail 0
    EOF
    chmod +x /usr/bin/pppd
    mount -o remount,ro /

    The above is completely untested though, so could contain all kinds of typo's and other errors. Also, XG expects pppd to exit after a connection failure so it can clean up the old connection etc, so having pppd hang around and create a new ppp session when XG doesn't know this is happening could upset things and introduce all kind of strange behaviors, especially if you have a dynamic IP (do ISP's still do that?).

    And of course Sophos Support won't want to touch your device if you've been tinkering!

    James

Children
No Data
Unfiltered HTML