This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SD-RED60 - no connection over Failover-Firewall-IP

Hi all,
configuration:
SD-RED 60 with 2 uplinks:
first - MPLS fixed IP
second - DSL - DHCP

within RED-Settings i have configured 2 connections to same FW
Firewall-IP/Hostname - 192.168.40.1 (MPLS-IP of Firewall)
2. Firewall-IP/Hostname - 22.33.44.55 (Firewall-WAN-IP)

Currently MPLS is not connected (prepare phase)

Problem:
i can see connection attempts to 192.168.40.1:3400 and 22.33.44.55:3400
but no established connection until i put 22.33.44.55 into both destination Firewall-IP-fields ...

also ... within production ... with MPLS conencted, the DSL-backup-conection isn't established when MPLS is pulled

ideas, hints??

THX

This thread was automatically locked due to age.

Parents

0 Vivek Jagad over 1 year ago

Hello dirkkotte ,

Thank you for reaching out to the community,

> TCP port 3400 (Control Connection, using SSL, authenticated with mutual X509 cert check)

> UDP port 3410 (Encapsulated traffic, AES256 (enc), SHA1-HMAC (auth))

> Hence for RED connection the following TCP 3400 and UDP 3410 ports are important for tunnel establishment.

> So, the Question is does your MPLS connection include the internet connectivity ?
As MPLS connectivity relies on a single carrier, while the Internet is unrestricted and can communicate via different carriers.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 1 year ago in reply to Vivek Jagad

Hello Vivek,

Internet cannot be reached within MPLS. (And it's not connected at all...)

The internet connection is via DSL = RED - WAN2 - port.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 dirkkotte over 1 year ago in reply to Vivek Jagad

Hello Vivek,

Internet cannot be reached within MPLS. (And it's not connected at all...)

The internet connection is via DSL = RED - WAN2 - port.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Vivek Jagad over 1 year ago in reply to dirkkotte

If I understand it correctly, are this your settings ?

Can you share the uplink settings configured ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 dirkkotte over 1 year ago in reply to Vivek Jagad

Hi Vivek,

I've opened a case. ID: 07148107

Here you can find additional details and screenshots.

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to dirkkotte

Thank you for the update, will expedite the resolution for the reported issue...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel