Unable to start Fastpath?

Hello All,

I am having Sophos XG v18 Refresh-1 Installed as a ISO file in VMware Fusion 10.1.6  in which I am trying to enable fastpath but getting below error.

console> system firewall-acceleration show
Firewall Acceleration is Enabled. Fastpath Load Failed.
console> system firewall-acceleration

Device information

Appliance Model:                SFVUNL
Firmware Version:               SFOS 18.0.0 EAP3-Refresh1
Firmware Build:                 279
Firmware Loader version:
HW version:                     SO01

I've came across same kind of error starting from EAP-1 till EAP-3 refresh.I have also tried to re-install again but still it was same.

I can see that VFP module is also not loaded due to the fact that fastpath is not been loaded.

SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# lsmod | grep vfp

I am not sure what needs to be done next, can someone please help me out?

Parents
  • Which virtual network adapter are you using. I suggest you use vmxnet3

     

    Currently fastpath supports the following NIC drivers: i40e, e1000, e1000e, igb, ixgbe, vmxnet3.  If fastpath is enabled when system has no supported NICs, fastpath load will fail but system will still be fully functional without the performance enhancements provided by fastpath

  • Stuart, I am not sure about selection of virtual network adapter, Can you please let me know how can I confirm it?

  • XG115W - v20 GA - Home

    XG on VM 8 - v20 GA

    If a post solves your question please use the 'Verify Answer' button.

  • Its been a long time since I used Fusion but I think you need to shutdown the VM, then edit the .vmx file for the VM to change the adapter type.

    ethernet*.virtualDev = "vlance" - thats the PCnet32 driver which is likely what yours has defaulted to.
    ethernet*.virtualDev = "vmxnet"
    ethernet*.virtualDev = "vmxnet3" - thats what you want

    ethernet*.virtualDev = "e1000"
    ethernet*.virtualDev = "e1000e" - a newer version of the E1000 which uses an PCI-express slot

     

    the * is obviously a number for your adapter.

  • Hello Stuart, I am getting below options

    virtualHW.version = "14"
    pciBridge0.present = "TRUE"
    pciBridge4.present = "TRUE"
    pciBridge4.virtualDev = "pcieRootPort"
    pciBridge4.functions = "8"
    pciBridge5.present = "TRUE"
    pciBridge5.virtualDev = "pcieRootPort"
    pciBridge5.functions = "8"
    pciBridge6.present = "TRUE"
    pciBridge6.virtualDev = "pcieRootPort"
    pciBridge6.functions = "8"
    pciBridge7.present = "TRUE"
    pciBridge7.virtualDev = "pcieRootPort"

    Shall I replace pcieRootPort with vmxnet3?

  • Actually, I am unable to get that exact details which you have mentioned, please help me test this feature properly

    .encoding = "UTF-8"
    config.version = "8"
    virtualHW.version = "14"
    pciBridge0.present = "TRUE"
    pciBridge4.present = "TRUE"
    pciBridge4.virtualDev = "pcieRootPort"
    pciBridge4.functions = "8"
    pciBridge5.present = "TRUE"
    pciBridge5.virtualDev = "pcieRootPort"
    pciBridge5.functions = "8"
    pciBridge6.present = "TRUE"
    pciBridge6.virtualDev = "pcieRootPort"
    pciBridge6.functions = "8"
    pciBridge7.present = "TRUE"
    pciBridge7.virtualDev = "pcieRootPort"
    pciBridge7.functions = "8"
    vmci0.present = "TRUE"
    hpet0.present = "TRUE"
    displayName = "V18"
    guestOS = "other"
    nvram = "V18 EAP0.nvram"
    virtualHW.productCompatibility = "hosted"
    powerType.powerOff = "soft"
    powerType.powerOn = "soft"
    powerType.suspend = "soft"
    powerType.reset = "soft"
    tools.syncTime = "TRUE"
    tools.upgrade.policy = "upgradeAtPowerCycle"
    sound.autoDetect = "TRUE"
    sound.fileName = "-1"
    sound.present = "TRUE"
    memsize = "5304"
    ide0:0.fileName = "Virtual Disk.vmdk"
    ide0:0.present = "TRUE"
    ide1:0.deviceType = "cdrom-imageJa"
    ide1:0.fileName = "/Downloads/SW-18.0.0_EAP0-43.iso"
    ide1:0.present = "TRUE"
    ethernet0.addressType = "generated"
    ethernet0.linkStatePropagation.enable = "TRUE"
    ethernet0.present = "TRUE"
    extendedConfigFile = "V18 EAP0.vmxf"
    floppy0.present = "FALSE"
    ethernet1.connectionType = "hostonly"
    ethernet1.addressType = "generated"
    ethernet1.present = "TRUE"
    ethernet2.addressType = "generated"
    ethernet2.present = "TRUE"
    numa.autosize.cookie = "30001"
    numa.autosize.vcpu.maxPerVirtualNode = "3"
    uuid.bios = "56 4d f3 17 83 42 0a d4-d7 50 6e ba 9a 04 ee a0"
    uuid.location = "56 4d f3 17 83 42 0a d4-d7 50 6e ba 9a 04 ee a0"
    migrate.hostlog = "./V18 EAP0-e66b1684.hlog"
    ide0:0.redo = ""
    pciBridge0.pciSlotNumber = "17"
    pciBridge4.pciSlotNumber = "21"
    pciBridge5.pciSlotNumber = "22"
    pciBridge6.pciSlotNumber = "23"
    pciBridge7.pciSlotNumber = "24"
    ethernet0.pciSlotNumber = "32"
    ethernet1.pciSlotNumber = "33"
    ethernet2.pciSlotNumber = "34"
    sound.pciSlotNumber = "35"
    vmci0.pciSlotNumber = "36"
    ethernet0.generatedAddress = "00:0C:29:04:EE:A0"
    ethernet0.generatedAddressOffset = "0"
    ethernet1.generatedAddress = "00:0C:29:04:EE:AA"
    ethernet1.generatedAddressOffset = "10"
    ethernet2.generatedAddress = "00:0C:29:04:EE:B4"
    ethernet2.generatedAddressOffset = "20"
    vmci0.id = "-1710952800"
    monitor.phys_bits_used = "43"
    vmotion.checkpointFBSize = "92274688"
    vmotion.checkpointSVGAPrimarySize = "92274688"
    cleanShutdown = "TRUE"
    softPowerOff = "TRUE"
    gui.exitOnCLIHLT = "TRUE"
    checkpoint.vmState = ""
    gui.viewModeAtPowerOn = "windowed"
    ethernet2.connectionType = "hostonly"
    ethernet3.addressType = "generated"
    ethernet3.present = "TRUE"
    ethernet3.linkStatePropagation.enable = "TRUE"
    ethernet3.pciSlotNumber = "37"
    ethernet3.generatedAddress = "00:0c:29:04:ee:be"
    ethernet3.generatedAddressOffset = "30"
    toolsInstallManager.updateCounter = "4"
    numvcpus = "3"
    cpuid.coresPerSocket = "3"
    ethernet4.connectionType = "nat"
    ethernet4.addressType = "generated"
    ethernet4.present = "TRUE"
    ethernet4.pciSlotNumber = "38"
    ethernet4.generatedAddress = "00:0c:29:04:ee:c8"
    ethernet4.generatedAddressOffset = "40"
    bios.bootOrder = "ethernet0"

  • James, your installation is using the pcnet32 driver by default hence why it's not listed. Simply add

    ethernet*.virtualDev = "vmxnet3"

    replace the * with unique number for each interface. eg ethernet0.virtualdev = "vmxnet3"

  • Stuart, You are my savior. Issue got resolved as per changes suggested from your end

    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# ethtool -i Port1
    driver: vmxnet3
    version: 1.4.a.0-k-NAPI
    firmware-version:
    expansion-rom-version:
    bus-info: 0000:03:00.0
    supports-statistics: yes
    supports-test: no
    supports-eeprom-access: no
    supports-register-dump: yes
    supports-priv-flags: no
    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# cish
    console> system firewall-acceleration show
    Firewall Acceleration is Enabled.
    console>

  • Stuart, I tried to follow your steps which resolved this issue  for fastpath but suddenly all traffic from my WAN interface is not working after applying this changes

    console> ping 10.10.5.100 (It is my upstream gateway)
    PING 10.10.5.100 (10.10.5.100): 56 data bytes
    ^C
    --- 10.10.5.100 ping statistics ---
    3 packets transmitted, 0 packets received, 100% packet loss


    console> system diagnostics utilities arp ping interface Port2 10.10.5.100
    ARPING to 10.10.5.100 from 10.10.5.2 via Port2
    ^CSent 3 probe(s) (3 broadcast(s))
    Received 0 reply (0 request(s), 0 broadcast(s))

    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# ethtool -i Port1
    driver: vmxnet3

    console> system firewall-acceleration show
    Firewall Acceleration is Enabled.
    console> system firewall-acceleration disable
    Firewall Acceleration Disabled Successfully.
    console> system firewall-acceleration show
    Firewall Acceleration is Disabled.

     

    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# drppkt host 8.8.8.8
    ^CSFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1#

     

    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# tcpdump -ni any host 8.8.8.8
    tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
    listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
    ^C
    0 packets captured
    0 packets received by filter
    0 packets dropped by kernel

     

    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# ping 8.8.8.8
    PING 8.8.8.8 (8.8.8.8): 56 data bytes
    ^C
    --- 8.8.8.8 ping statistics ---
    5 packets transmitted, 0 packets received, 100% packet loss
    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1#

Reply
  • Stuart, I tried to follow your steps which resolved this issue  for fastpath but suddenly all traffic from my WAN interface is not working after applying this changes

    console> ping 10.10.5.100 (It is my upstream gateway)
    PING 10.10.5.100 (10.10.5.100): 56 data bytes
    ^C
    --- 10.10.5.100 ping statistics ---
    3 packets transmitted, 0 packets received, 100% packet loss


    console> system diagnostics utilities arp ping interface Port2 10.10.5.100
    ARPING to 10.10.5.100 from 10.10.5.2 via Port2
    ^CSent 3 probe(s) (3 broadcast(s))
    Received 0 reply (0 request(s), 0 broadcast(s))

    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# ethtool -i Port1
    driver: vmxnet3

    console> system firewall-acceleration show
    Firewall Acceleration is Enabled.
    console> system firewall-acceleration disable
    Firewall Acceleration Disabled Successfully.
    console> system firewall-acceleration show
    Firewall Acceleration is Disabled.

     

    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# drppkt host 8.8.8.8
    ^CSFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1#

     

    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# tcpdump -ni any host 8.8.8.8
    tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
    listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
    ^C
    0 packets captured
    0 packets received by filter
    0 packets dropped by kernel

     

    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1# ping 8.8.8.8
    PING 8.8.8.8 (8.8.8.8): 56 data bytes
    ^C
    --- 8.8.8.8 ping statistics ---
    5 packets transmitted, 0 packets received, 100% packet loss
    SFVUNL_SO01_SFOS 18.0.0 EAP3-Refresh1#

Children