This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos fire wall Dual stack Control Center/system interfaces WAN link manager is red why not green?

Hi All,

I recently added IPv6 support to XG FW and something says not right. I have pubic v6 address on WAN link, 2 private ranges on LAN and DMZ . I am using router advertisement for IPv6. The FW rules show traffic on v6 both directions, The v6 test web sites give it 10/10 pass (https://test-ipv6.com/). 1/2 my traffic volume in reports is v6. It all works great.!

However the gateway and interfaces turned red after I set this up and persist today, is it really broken? seems fine to me. Thoughts anyone?

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 1 year ago in reply to wilspin +1 suggested

Click on the starlink, and change the monitoring option. The firewall will try to reach out to the health check client and if this is not reachable (the gateway) then it will be shown as red.

Parents

0 emmosophos over 1 year ago

Hello Daniel,

Thank you for contacting the Sophos Community.

What IP are the interfaces Pinging if you go to the WAN Link Manager? In order for this to change from RED to Green, it has to hear back from the IP being Pinged, if it doesn't then the interface turns RED.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin over 1 year ago in reply to emmosophos

Hey Emmanuel,

Ping does not work for IPv6, that is why we have red. The result is blank with OK button, no verbose at all.Wan link manager is pinging the default gateway (GW) on my router. This is a DHCP generated setting from the router. this is the same GW address used by all machines connected to this router. They all can ping the GW but not Sophos FW. BTW the IP is a link-local address, (FE80:::) I suspect that is not liked by FW.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin over 1 year ago in reply to LuCar Toni

I can only ping from other devices not Sophos firewall that is the complaint.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin over 1 year ago in reply to rfcat_vk

Yes I read those threads, tried the remedies to no avail.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin over 1 year ago in reply to LuCar Toni

And remember IPv6 is fully functional!
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin over 1 year ago in reply to rfcat_vk

So I swapped out the Starlink hardware today with new. No change in GW status.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 1 year ago in reply to wilspin

So what component do you ping right now? Did you try to ping 8.8.8.8?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 1 year ago in reply to wilspin

Please try using your wan interface as your test address.

ping google dns 2001:4860:4860::8888. Further there is something wrong with your XG configuration, the XG will not pass traffic if the interface is showing down.

ian

Corrected a formatting error on the Google DNS

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin over 1 year ago in reply to LuCar Toni

this is not about ipv4 all good there.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin over 1 year ago in reply to rfcat_vk

Use WAN add to test what ping? The Google address was missing a colon but yes that is successful. so there has to be a good gateway right? exactly but is is passing traffic.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin over 1 year ago in reply to wilspin

Yes WAN ping works. Lets not loose focus on the issue. The gateway shows down. Everything works.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin over 1 year ago in reply to rfcat_vk

also something IS wrong with your XG configuration but what?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 wilspin over 1 year ago in reply to rfcat_vk

also something IS wrong with your XG configuration but what?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 rfcat_vk over 1 year ago in reply to wilspin

I am not losing focus on the interface being down. The conclusion is that you are plugged into a different port of the XG to what you think you are using. What hardware are you using for this XG?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 wilspin over 1 year ago in reply to rfcat_vk

If i was plugged into different port there would be no traffic, remember it all works so interface cannot be 'down'. we are using virtual hardware on hyper V.
Cancel
Vote Up 0 Vote Down

Cancel