Firewalls do not connect backup to the internet after ISP goes down and back up

Hi Nicholas Pick Thank you for reaching out to the Sophos community team if I summarize the issue here, "XG WAN Interface configured with IP assignment type DHCP" is not getting auto-reconnect after scheduled maintenance at the ISP end and the customer required a reboot of Firewall to make the ISP online! Am I correct in this understanding and issue summarization? 

If yes, then the DHCP client (XG WAN) will not send new IP [release/renew/reconnect] requests until its lease time ends. So making the modem ON/OFF or plugging/unplugging the physical link/ISP scheduled maintenance generating disconnection.. etc will not trigger any DHCP client renewal events. This is how the DHCP client has worked in SFOS since its inception.

Workaround: One can avoid rebooting of firewall and may log in to Firewall Webadmin and save the DHCP WAN interface/update the DHCP WAN interface without any changes in interface settings as this event will forcefully restart the DHCP client and due to that IP will lease from the DHCP server.

There is a feature request to try and resolve or to enhance this current behavior under the following existing ID SFSW-I-1139.

So you can submit your Feature Request using the in-product feedback in the Sophos Firewall located in the Top Menu Bar.

In case I misunderstood the scenario, please brief me with more details or observations, so I can re-assess the situation and may provide my inputs to help you on same!

Hi Nicholas Pick Thank you for reaching out to the Sophos community team if I summarize the issue here, "XG WAN Interface configured with IP assignment type DHCP" is not getting auto-reconnect after scheduled maintenance at the ISP end and the customer required a reboot of Firewall to make the ISP online! Am I correct in this understanding and issue summarization? 

If yes, then the DHCP client (XG WAN) will not send new IP [release/renew/reconnect] requests until its lease time ends. So making the modem ON/OFF or plugging/unplugging the physical link/ISP scheduled maintenance generating disconnection.. etc will not trigger any DHCP client renewal events. This is how the DHCP client has worked in SFOS since its inception.

Workaround: One can avoid rebooting of firewall and may log in to Firewall Webadmin and save the DHCP WAN interface/update the DHCP WAN interface without any changes in interface settings as this event will forcefully restart the DHCP client and due to that IP will lease from the DHCP server.

There is a feature request to try and resolve or to enhance this current behavior under the following existing ID SFSW-I-1139.

So you can submit your Feature Request using the in-product feedback in the Sophos Firewall located in the Top Menu Bar.

In case I misunderstood the scenario, please brief me with more details or observations, so I can re-assess the situation and may provide my inputs to help you on same!

Yes, you are correct on the DHCP. The workaround is not feasible with these clients. Are you saying there is a feature request to resolve this?

Hi Nicholas Pick Yes work is in progress with the mentioned feature request ID in my last comment to enhance this existing working behavior. 

Thanks for the swift reply. 

Your Welcome Nicholas Pick 

Hi,

this was fixed in an earlier version of v20n, but is now faulty in v20.0.2 mr-2 v21 and the suggested fix no longer works and requires a restart. The XG shows traffic activity, but never connects and the WAN link manager shows failed connections until a restart is performed.

I have this issue in an XG115w running v20.0.2 mr-2 and a VM XG running v21 GA. 

Ian