Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 37 subscribers
  • Views 1019 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG Firewalls Need Reboot

Clay Tsuhako

Hello:

I was wondering if anyone has ever come across this issue.

We have two XG210 firewalls in HA mode. There are three WAN connections inbound. Today, one of the WAN connections was showing offline all of sudden. I was able to ping the WAN's router but nothing inside of that. The other connections were fine. Tried changing the ethernet cable from the WAN router and no change. The only thing that seemed to fix it was a complete reboot of both firewalls. Has anyone seen this before?

Thansk!



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    What do you see in the syslog for the specific interface?

    Run the following command to check the status of the interface around the time you noticed this issue. 

    • grep -i "NIC" syslog.log

    Thanks,

  • 0 in reply to FormerMember

    Hi:

    Where do I run that command from?

    Clay

  • FormerMember
    0 FormerMember in reply to Clay Tsuhako

    Hi ,

    You can run the command from the Advanced shell. Check out the following KBA for more information: 

    Once you have SSH access, type 5, then 3 to access the Advanced shell.

    Thanks,

  • 0 in reply to FormerMember

    Thanks you. What do I input for "NIC"?

  • FormerMember
    0 FormerMember in reply to Clay Tsuhako

    Hi ,

    You could just run the command as is or replace the NIC with the port that had the issue. 

    Thanks,

  • 0 in reply to FormerMember

    Hello, H_Patel:

    Running the command yields no information at all.

    Clay

  • FormerMember
    0 FormerMember in reply to Clay Tsuhako

    Hi ,

    Would it be possible for you to share a screenshot of what you see when running the command? 

    Check if you're in /log directory with command "pwd" 

    You can find the log files in the /log directory. On the CLI, select option 5. Device Management, then option 3. Advanced Shell. Then change to the log directory using the command cd /log.

    Thanks,

  • 0 in reply to FormerMember

    Hi, H_Patel:

    Thanks. Got it. There is nothing around the time that Port2 showed as down. The subsequent info looks like it was from when we restarted both XG firewalls. Port3 is the HA interface. Also, notice that the Port3 link went down later in the day (15:29:15). We briefly showed Port2 down but it cam right back up.

    May 12 10:28:51 (none) user.info kernel: [11499743.193970] igb_nm 0000:03:00.0 P
    ort2: igb: Port2 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None       
    May 12 10:29:57 (none) user.info kernel: [11499809.105968] igb_nm 0000:03:00.0 P
    ort2: igb: Port2 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None       
    May 12 10:38:20 (none) user.info kernel: [11500312.601364] igb_nm 0000:04:00.0 P
    ort3: igb: Port3 NIC Link is Down                                               
    May 12 10:38:28 (none) user.info kernel: [11500320.445980] igb_nm 0000:04:00.0 P
    ort3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX      
    May 12 10:39:13 (none) user.info kernel: [11500364.877368] igb_nm 0000:04:00.0 P
    ort3: igb: Port3 NIC Link is Down                                               
    May 12 10:39:21 (none) user.info kernel: [11500373.457978] igb_nm 0000:04:00.0 P
    ort3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX      
    May 12 10:36:59 (none) user.info kernel: [   20.084862] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:37:51 (none) user.info kernel: [   72.832251] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 10:37:54 (none) user.info kernel: [   75.676861] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:37:59 (none) user.info kernel: [   80.796251] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 10:38:03 (none) user.info kernel: [   84.640866] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:39:51 (none) user.info kernel: [  192.536865] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:39:55 (none) user.info kernel: [  196.136864] igb_nm 0000:06:00.0 Port
    5: igb: Port5 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:39:56 (none) user.info kernel: [  197.428866] igb_nm 0000:05:00.0 Port
    4: igb: Port4 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:39:57 (none) user.info kernel: [  198.680860] igb_nm 0000:02:00.0 Port
    1: igb: Port1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:40:00 (none) user.info kernel: [  201.908867] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:40:01 (none) user.info kernel: [  202.096866] igb_nm 0000:03:00.0 Port
    2: igb: Port2 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:40:01 (none) user.info kernel: [  202.168868] igb_nm 0000:02:00.0 Port
    1: igb: Port1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:40:01 (none) user.info kernel: [  202.444868] igb_nm 0000:05:00.0 Port
    4: igb: Port4 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:40:01 (none) user.info kernel: [  202.860867] igb_nm 0000:06:00.0 Port
    5: igb: Port5 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:42:07 (none) user.info kernel: [   15.072865] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:42:57 (none) user.info kernel: [   66.912864] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:43:01 (none) user.info kernel: [   70.320861] igb_nm 0000:06:00.0 Port
    5: igb: Port5 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:43:02 (none) user.info kernel: [   71.640857] igb_nm 0000:05:00.0 Port
    4: igb: Port4 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:43:06 (none) user.info kernel: [   75.792860] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:43:06 (none) user.info kernel: [   75.844866] igb_nm 0000:03:00.0 Port
    2: igb: Port2 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:43:07 (none) user.info kernel: [   76.380860] igb_nm 0000:06:00.0 Port
    5: igb: Port5 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:43:07 (none) user.info kernel: [   76.780861] igb_nm 0000:05:00.0 Port
    4: igb: Port4 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:43:07 (none) user.info kernel: [   76.896869] igb_nm 0000:02:00.0 Port
    1: igb: Port1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 15:29:15 (none) user.info kernel: [17244.228314] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 15:29:19 (none) user.info kernel: [17248.420937] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 15:29:38 (none) user.info kernel: [17267.852324] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 15:29:46 (none) user.info kernel: [17275.932935] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 15:34:26 (none) user.info kernel: [17555.096325] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 15:34:29 (none) user.info kernel: [17558.032931] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 15:34:34 (none) user.info kernel: [17563.108321] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 15:34:37 (none) user.info kernel: [17566.936960] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX

    Thank you for your help.

    Clay

Reply
  • 0 in reply to FormerMember

    Hi, H_Patel:

    Thanks. Got it. There is nothing around the time that Port2 showed as down. The subsequent info looks like it was from when we restarted both XG firewalls. Port3 is the HA interface. Also, notice that the Port3 link went down later in the day (15:29:15). We briefly showed Port2 down but it cam right back up.

    May 12 10:28:51 (none) user.info kernel: [11499743.193970] igb_nm 0000:03:00.0 P
    ort2: igb: Port2 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None       
    May 12 10:29:57 (none) user.info kernel: [11499809.105968] igb_nm 0000:03:00.0 P
    ort2: igb: Port2 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None       
    May 12 10:38:20 (none) user.info kernel: [11500312.601364] igb_nm 0000:04:00.0 P
    ort3: igb: Port3 NIC Link is Down                                               
    May 12 10:38:28 (none) user.info kernel: [11500320.445980] igb_nm 0000:04:00.0 P
    ort3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX      
    May 12 10:39:13 (none) user.info kernel: [11500364.877368] igb_nm 0000:04:00.0 P
    ort3: igb: Port3 NIC Link is Down                                               
    May 12 10:39:21 (none) user.info kernel: [11500373.457978] igb_nm 0000:04:00.0 P
    ort3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX      
    May 12 10:36:59 (none) user.info kernel: [   20.084862] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:37:51 (none) user.info kernel: [   72.832251] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 10:37:54 (none) user.info kernel: [   75.676861] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:37:59 (none) user.info kernel: [   80.796251] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 10:38:03 (none) user.info kernel: [   84.640866] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:39:51 (none) user.info kernel: [  192.536865] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:39:55 (none) user.info kernel: [  196.136864] igb_nm 0000:06:00.0 Port
    5: igb: Port5 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:39:56 (none) user.info kernel: [  197.428866] igb_nm 0000:05:00.0 Port
    4: igb: Port4 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:39:57 (none) user.info kernel: [  198.680860] igb_nm 0000:02:00.0 Port
    1: igb: Port1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:40:00 (none) user.info kernel: [  201.908867] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:40:01 (none) user.info kernel: [  202.096866] igb_nm 0000:03:00.0 Port
    2: igb: Port2 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:40:01 (none) user.info kernel: [  202.168868] igb_nm 0000:02:00.0 Port
    1: igb: Port1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:40:01 (none) user.info kernel: [  202.444868] igb_nm 0000:05:00.0 Port
    4: igb: Port4 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:40:01 (none) user.info kernel: [  202.860867] igb_nm 0000:06:00.0 Port
    5: igb: Port5 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:42:07 (none) user.info kernel: [   15.072865] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:42:57 (none) user.info kernel: [   66.912864] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:43:01 (none) user.info kernel: [   70.320861] igb_nm 0000:06:00.0 Port
    5: igb: Port5 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:43:02 (none) user.info kernel: [   71.640857] igb_nm 0000:05:00.0 Port
    4: igb: Port4 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:43:06 (none) user.info kernel: [   75.792860] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 10:43:06 (none) user.info kernel: [   75.844866] igb_nm 0000:03:00.0 Port
    2: igb: Port2 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:43:07 (none) user.info kernel: [   76.380860] igb_nm 0000:06:00.0 Port
    5: igb: Port5 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:43:07 (none) user.info kernel: [   76.780861] igb_nm 0000:05:00.0 Port
    4: igb: Port4 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 10:43:07 (none) user.info kernel: [   76.896869] igb_nm 0000:02:00.0 Port
    1: igb: Port1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None          
    May 12 15:29:15 (none) user.info kernel: [17244.228314] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 15:29:19 (none) user.info kernel: [17248.420937] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 15:29:38 (none) user.info kernel: [17267.852324] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 15:29:46 (none) user.info kernel: [17275.932935] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 15:34:26 (none) user.info kernel: [17555.096325] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 15:34:29 (none) user.info kernel: [17558.032931] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX         
    May 12 15:34:34 (none) user.info kernel: [17563.108321] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Down                                                  
    May 12 15:34:37 (none) user.info kernel: [17566.936960] igb_nm 0000:04:00.0 Port
    3: igb: Port3 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX/TX

    Thank you for your help.

    Clay

Children
No Data
Unfiltered HTML