Sophos fire wall Dual stack Control Center/system interfaces WAN link manager is red why not green?

Hello Daniel,

Thank you for contacting the Sophos Community.

What IP are the interfaces Pinging if you go to the WAN Link Manager? In order for this to change from RED to Green, it has to hear back from the IP being Pinged, if it doesn't then the interface turns RED.

Regards,

Hey Emmanuel,

Ping does not work for IPv6, that is why we have red. The result is blank with OK button, no verbose at all.Wan link manager is pinging the default gateway (GW) on my router. This is a DHCP generated setting from the router. this is the same GW address used by all machines connected to this router. They all can ping the GW but not Sophos FW. BTW the IP is a link-local address, (FE80:::) I suspect that is not liked by FW.

Hey Emmanuel,

Ping does not work for IPv6, that is why we have red. The result is blank with OK button, no verbose at all.Wan link manager is pinging the default gateway (GW) on my router. This is a DHCP generated setting from the router. this is the same GW address used by all machines connected to this router. They all can ping the GW but not Sophos FW. BTW the IP is a link-local address, (FE80:::) I suspect that is not liked by FW.

Hi,

the link local address is usually the destination gateway address. Please post a copy of your WAN manager settings?

Ian

here:

Click on the starlink, and change the monitoring option. The firewall will try to reach out to the health check client and if this is not reachable (the gateway) then it will be shown as red. 

Yes I tried changing that option, did not solve anything. The question is why is it not reachable? The IPv4 gateway is fine. Lots of traffic on both. How can I have v6 traffic if the gateway is not available? Clearly it is. Just not to that management tool.

Maybe the starlink is not setup to respond to ping?

In that case change the ping test to your local interface and try access again.

Ian

quote from above;'

this is the same GW address used by all machines connected to this router. They all can ping the GW

Edit and save your WAN link interface, otherwise try a restart of the XG. There are a number of older threads on a similar vain.

Ian

Please show us the gateway, which is selected there and a proof, you can ping it from the SFOS firewall. Because this is most likely the case, the firewall cannot reach the gateway via ICMP. 

 I can only ping from other devices not Sophos firewall that is the complaint.

Yes I read those threads, tried the remedies to no avail.