This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Routing Table differs between GUI & Shell

Guenter Wukoutz over 5 years ago

Hi Community,

on our XG230 with V17.5 I have different Routing Tables between GUI and Linux Kernel.

My Interfaceconfiguration is:

My Static Routing was configured by GUI, but it differs to "route" on Linux Shell:

The route to 192.9.200.0/24 is missing.

So, what can I do now?

Is this topic already known?

kind regards

Guenter

This thread was automatically locked due to age.

0 lna over 5 years ago

Hi Guenther,

please show us the Output of "ip route" and the route cache for one ip in the missing remote network

example: "ip r g 192.9.200.2"

Yours Lukas

lna@cema

SCA (utm+xg), SCSE, SCT

Sophos Platinum Partner
Cancel
Vote Up 0 Vote Down

Cancel
0 Guenter Wukoutz over 5 years ago in reply to lna

XG230_WP02_SFOS 17.5.0 GA# ip r g 192.9.200.2
192.9.200.2 via 178.188.248.104 dev Port2 src 178.188.248.106
Cancel
Vote Up 0 Vote Down

Cancel
0 lna over 5 years ago in reply to Guenter Wukoutz

Hi Guenther,

for completeness please share the output of ip route.

Since the gateway 178.188.248.104 does not match your route definition, i assume this as the default gateway of one of your WAN Ports.

you can try to delete and readd the route if this doesn't help, please consider this a bug and call support.

btw. Have you changed anything in routing precedence in Device Console? " system route_precedence show"

Yours Lukas

lna@cema

SCA (utm+xg), SCSE, SCT

Sophos Platinum Partner
Cancel
Vote Up 0 Vote Down

Cancel
+1 Guenter Wukoutz over 5 years ago in reply to lna

I have played with the GUI. Add / Delete the route, now the route is now shown. I think there is a bug. The GUI shows the same entries as before.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Guenter Wukoutz

Most likely your route in GUI has some "validation error" while trying to save it. So it never comes to the iptables.

You could open a sophos Support case to get a information about this.

https://community.sophos.com/kb/en-us/123185

You should find a log called validation_error.log

This log should indicate "something". It is hard to read, so i would suggest to contact the Support.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel