Not able to register AP55C on Sophos Central

We have several AP55C. Once registered to a UTM. We upgraded to a XGS

We now want to register the AP's on sophos central. 

The AP's have the Sophos Central Ready Sticker. 

DHCP provides the AP with an IP address

I can see it communicating to the IP's listed on the Sophos Central Wireless: Network requirements

But in Sophos Central we recieve an error during the initial registration process "

 AP did not connect to cloud within the timeout
Retry"

Any idea's. I have plugged the AP into two different Networks

Parents
  • have you read this? https://community.sophos.com/sophos-xg-firewall/f/discussions/134349/register-ap55c-to-sophos-central-behind-xgs

    in our case it was the VLAN tagging on the Switchport that needed to be removed.

    also your AP needs 443 communication to Sophos cloud and NTP to any.

  • Yeah have seen that one. Also the one about disabling wireless protection I also took a single AP home and retried from my own network to no avail unfortunately. Would their be an issue with a lingering registration to the previous UTM ? I can confirm i did see the related traffic whilst i was internal. Perhaps i am hypotised by the flashing lights but at some point they do go green through the registration process before eventually going amber. Anything else i need to consider ?

  • best would be to connect it to the old UTM, deregister it there (required), and then (optional) when it is listed as pending AP, remove it wait for the LED to go off and then quickly unplug it from the network before it reboots and contact the UTM again.

    Do you know the firmware on the AP? The UTM should be up2date so that the AP get's current firmware.

    I think it is still trying to reach the UTM because not removed from there. It should work from your private LAN.

    Here you can see how it should communicate after boot and getting DHCP

    07:55:07.226806 lag0.34, OUT: ARP, Reply XGS-IP is-at c8:4f:86:fc:00:08, length 28
    07:55:07.226808 lag0, OUT: ethertype ARP, ARP, Reply XGS-IP is-at c8:4f:86:fc:00:08, length 28
    07:55:07.226981 Port6, IN: ethertype IPv4, IP AP55C-IP.37690 > XGS-IP.53: 26+ AAAA? 3.openwrt.pool.ntp.org. (40)
    07:55:07.226981 lag0, IN: ethertype IPv4, IP AP55C-IP.37690 > XGS-IP.53: 26+ AAAA? 3.openwrt.pool.ntp.org. (40)
    07:55:07.226981 lag0.34, IN: IP AP55C-IP.37690 > XGS-IP.53: 26+ AAAA? 3.openwrt.pool.ntp.org. (40)
    07:55:07.244869 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.37690: 26 0/0/0 (40)
    07:55:07.244874 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.37690: 26 0/0/0 (40)
    07:55:07.245266 Port6, IN: ethertype IPv4, IP AP55C-IP.56987 > XGS-IP.53: 27+ A? 3.openwrt.pool.ntp.org. (40)
    07:55:07.245266 lag0, IN: ethertype IPv4, IP AP55C-IP.56987 > XGS-IP.53: 27+ A? 3.openwrt.pool.ntp.org. (40)
    07:55:07.245266 lag0.34, IN: IP AP55C-IP.56987 > XGS-IP.53: 27+ A? 3.openwrt.pool.ntp.org. (40)
    07:55:07.263656 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.56987: 27 4/0/0 A 80.152.201.148, A 194.25.134.196, A 176.221.42.125, A 213.239.234.28 (104)
    07:55:07.263659 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.56987: 27 4/0/0 A 80.152.201.148, A 194.25.134.196, A 176.221.42.125, A 213.239.234.28 (104)
    07:55:07.264314 Port5, IN: ethertype IPv4, IP AP55C-IP.45132 > XGS-IP.53: 28+ AAAA? 2.openwrt.pool.ntp.org. (40)
    07:55:07.264314 lag0, IN: ethertype IPv4, IP AP55C-IP.45132 > XGS-IP.53: 28+ AAAA? 2.openwrt.pool.ntp.org. (40)
    07:55:07.264314 lag0.34, IN: IP AP55C-IP.45132 > XGS-IP.53: 28+ AAAA? 2.openwrt.pool.ntp.org. (40)
    07:55:07.264389 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.45132: 28 4/0/0 AAAA 2a03:4000:4e:9ed:34db:7bff:feea:4253, AAAA 2a01:4f8:c17:d8f2::1, AAAA 2a01:4f8:141:31c2::2, AAAA 2a01:4f8:c17:b041::1 (152)
    07:55:07.264392 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.45132: 28 4/0/0 AAAA 2a03:4000:4e:9ed:34db:7bff:feea:4253, AAAA 2a01:4f8:c17:d8f2::1, AAAA 2a01:4f8:141:31c2::2, AAAA 2a01:4f8:c17:b041::1 (152)
    07:55:07.264783 Port8, IN: ethertype IPv4, IP AP55C-IP.53232 > XGS-IP.53: 29+ A? 2.openwrt.pool.ntp.org. (40)
    07:55:07.264783 lag0, IN: ethertype IPv4, IP AP55C-IP.53232 > XGS-IP.53: 29+ A? 2.openwrt.pool.ntp.org. (40)
    07:55:07.264783 lag0.34, IN: IP AP55C-IP.53232 > XGS-IP.53: 29+ A? 2.openwrt.pool.ntp.org. (40)
    07:55:07.286959 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.53232: 29 4/0/0 A 188.68.48.10, A 80.151.186.5, A 5.189.140.236, A 129.70.132.33 (104)
    07:55:07.286963 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.53232: 29 4/0/0 A 188.68.48.10, A 80.151.186.5, A 5.189.140.236, A 129.70.132.33 (104)
    07:55:07.287524 Port6, IN: ethertype IPv4, IP AP55C-IP.54230 > XGS-IP.53: 30+ AAAA? 1.openwrt.pool.ntp.org. (40)
    07:55:07.287524 lag0, IN: ethertype IPv4, IP AP55C-IP.54230 > XGS-IP.53: 30+ AAAA? 1.openwrt.pool.ntp.org. (40)
    07:55:07.287524 lag0.34, IN: IP AP55C-IP.54230 > XGS-IP.53: 30+ AAAA? 1.openwrt.pool.ntp.org. (40)
    07:55:07.287602 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.54230: 30 0/0/0 (40)
    07:55:07.287608 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.54230: 30 0/0/0 (40)
    07:55:07.287989 Port8, IN: ethertype IPv4, IP AP55C-IP.37130 > XGS-IP.53: 31+ A? 1.openwrt.pool.ntp.org. (40)
    07:55:07.287989 lag0, IN: ethertype IPv4, IP AP55C-IP.37130 > XGS-IP.53: 31+ A? 1.openwrt.pool.ntp.org. (40)
    07:55:07.287989 lag0.34, IN: IP AP55C-IP.37130 > XGS-IP.53: 31+ A? 1.openwrt.pool.ntp.org. (40)
    07:55:07.306430 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.37130: 31 4/0/0 A 144.76.138.23, A 185.11.138.90, A 46.4.54.78, A 85.220.190.246 (104)
    07:55:07.306436 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.37130: 31 4/0/0 A 144.76.138.23, A 185.11.138.90, A 46.4.54.78, A 85.220.190.246 (104)
    07:55:07.306986 Port7, IN: ethertype IPv4, IP AP55C-IP.38391 > XGS-IP.53: 32+ AAAA? 0.openwrt.pool.ntp.org. (40)
    07:55:07.306986 lag0, IN: ethertype IPv4, IP AP55C-IP.38391 > XGS-IP.53: 32+ AAAA? 0.openwrt.pool.ntp.org. (40)
    07:55:07.306986 lag0.34, IN: IP AP55C-IP.38391 > XGS-IP.53: 32+ AAAA? 0.openwrt.pool.ntp.org. (40)
    07:55:07.307332 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.38391: 32 0/0/0 (40)
    07:55:07.307338 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.38391: 32 0/0/0 (40)
    07:55:07.307727 Port6, IN: ethertype IPv4, IP AP55C-IP.57859 > XGS-IP.53: 33+ A? 0.openwrt.pool.ntp.org. (40)
    07:55:07.307727 lag0, IN: ethertype IPv4, IP AP55C-IP.57859 > XGS-IP.53: 33+ A? 0.openwrt.pool.ntp.org. (40)
    07:55:07.307727 lag0.34, IN: IP AP55C-IP.57859 > XGS-IP.53: 33+ A? 0.openwrt.pool.ntp.org. (40)
    07:55:07.325214 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.57859: 33 4/0/0 A 213.202.247.29, A 185.120.22.12, A 129.70.132.35, A 188.68.41.203 (104)
    07:55:07.325218 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.57859: 33 4/0/0 A 213.202.247.29, A 185.120.22.12, A 129.70.132.35, A 188.68.41.203 (104)
    07:55:07.373366 Port8, IN: ethertype IPv4, IP AP55C-IP.35489 > XGS-IP.53: 2+ PTR? 1.34.168.192.in-addr.arpa. (43)
    07:55:07.373366 lag0, IN: ethertype IPv4, IP AP55C-IP.35489 > XGS-IP.53: 2+ PTR? 1.34.168.192.in-addr.arpa. (43)
    07:55:07.373366 lag0.34, IN: IP AP55C-IP.35489 > XGS-IP.53: 2+ PTR? 1.34.168.192.in-addr.arpa. (43)
    07:55:07.373472 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.35489: 2 NXDomain* 0/0/0 (43)
    07:55:07.373475 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.35489: 2 NXDomain* 0/0/0 (43)
    07:55:07.374826 Port6, IN: ethertype IPv4, IP AP55C-IP.38611 > XGS-IP.53: 3+ AAAA? wifi.cloud.sophos.com. (39)
    07:55:07.374826 lag0, IN: ethertype IPv4, IP AP55C-IP.38611 > XGS-IP.53: 3+ AAAA? wifi.cloud.sophos.com. (39)
    07:55:07.374826 lag0.34, IN: IP AP55C-IP.38611 > XGS-IP.53: 3+ AAAA? wifi.cloud.sophos.com. (39)
    07:55:07.379855 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.38611: 3 1/0/0 CNAME hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com. (107)
    07:55:07.379859 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.38611: 3 1/0/0 CNAME hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com. (107)
    07:55:07.380861 Port6, IN: ethertype IPv4, IP AP55C-IP.59923 > XGS-IP.53: 4+ AAAA? hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com. (75)
    07:55:07.380861 lag0, IN: ethertype IPv4, IP AP55C-IP.59923 > XGS-IP.53: 4+ AAAA? hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com. (75)
    07:55:07.380861 lag0.34, IN: IP AP55C-IP.59923 > XGS-IP.53: 4+ AAAA? hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com. (75)
    07:55:07.380926 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.59923: 4 0/0/0 (75)
    07:55:07.380928 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.59923: 4 0/0/0 (75)
    07:55:07.381290 Port7, IN: ethertype IPv4, IP AP55C-IP.48812 > XGS-IP.53: 5+ A? wifi.cloud.sophos.com. (39)
    07:55:07.381290 lag0, IN: ethertype IPv4, IP AP55C-IP.48812 > XGS-IP.53: 5+ A? wifi.cloud.sophos.com. (39)
    07:55:07.381290 lag0.34, IN: IP AP55C-IP.48812 > XGS-IP.53: 5+ A? wifi.cloud.sophos.com. (39)
    07:55:07.381359 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.48812: 5 4/0/0 CNAME hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com., A 99.80.207.79, A 52.51.156.20, A 63.33.113.220 (155)
    07:55:07.381363 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.48812: 5 4/0/0 CNAME hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com., A 99.80.207.79, A 52.51.156.20, A 63.33.113.220 (155)
    07:55:07.381815 Port8, IN: ethertype IPv4, IP AP55C-IP.43095 > XGS-IP.53: 6+ PTR? 79.207.80.99.in-addr.arpa. (43)
    07:55:07.381815 lag0, IN: ethertype IPv4, IP AP55C-IP.43095 > XGS-IP.53: 6+ PTR? 79.207.80.99.in-addr.arpa. (43)
    07:55:07.381815 lag0.34, IN: IP AP55C-IP.43095 > XGS-IP.53: 6+ PTR? 79.207.80.99.in-addr.arpa. (43)
    07:55:07.385119 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.43095: 6 1/0/0 PTR ec2-99-80-207-79.eu-west-1.compute.amazonaws.com. (105)
    07:55:07.385122 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.43095: 6 1/0/0 PTR ec2-99-80-207-79.eu-west-1.compute.amazonaws.com. (105)
    07:55:07.385587 Port7, IN: ethertype IPv4, IP AP55C-IP.42279 > XGS-IP.53: 7+ PTR? 20.156.51.52.in-addr.arpa. (43)
    07:55:07.385587 lag0, IN: ethertype IPv4, IP AP55C-IP.42279 > XGS-IP.53: 7+ PTR? 20.156.51.52.in-addr.arpa. (43)
    07:55:07.385587 lag0.34, IN: IP AP55C-IP.42279 > XGS-IP.53: 7+ PTR? 20.156.51.52.in-addr.arpa. (43)
    07:55:07.389611 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.42279: 7 1/0/0 PTR ec2-52-51-156-20.eu-west-1.compute.amazonaws.com. (105)
    07:55:07.389614 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.42279: 7 1/0/0 PTR ec2-52-51-156-20.eu-west-1.compute.amazonaws.com. (105)
    07:55:07.390036 Port7, IN: ethertype IPv4, IP AP55C-IP.38062 > XGS-IP.53: 8+ PTR? 220.113.33.63.in-addr.arpa. (44)
    07:55:07.390036 lag0, IN: ethertype IPv4, IP AP55C-IP.38062 > XGS-IP.53: 8+ PTR? 220.113.33.63.in-addr.arpa. (44)
    07:55:07.390036 lag0.34, IN: IP AP55C-IP.38062 > XGS-IP.53: 8+ PTR? 220.113.33.63.in-addr.arpa. (44)
    07:55:07.394844 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.38062: 8 1/0/0 PTR ec2-63-33-113-220.eu-west-1.compute.amazonaws.com. (107)
    07:55:07.394847 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.38062: 8 1/0/0 PTR ec2-63-33-113-220.eu-west-1.compute.amazonaws.com. (107)

Reply
  • best would be to connect it to the old UTM, deregister it there (required), and then (optional) when it is listed as pending AP, remove it wait for the LED to go off and then quickly unplug it from the network before it reboots and contact the UTM again.

    Do you know the firmware on the AP? The UTM should be up2date so that the AP get's current firmware.

    I think it is still trying to reach the UTM because not removed from there. It should work from your private LAN.

    Here you can see how it should communicate after boot and getting DHCP

    07:55:07.226806 lag0.34, OUT: ARP, Reply XGS-IP is-at c8:4f:86:fc:00:08, length 28
    07:55:07.226808 lag0, OUT: ethertype ARP, ARP, Reply XGS-IP is-at c8:4f:86:fc:00:08, length 28
    07:55:07.226981 Port6, IN: ethertype IPv4, IP AP55C-IP.37690 > XGS-IP.53: 26+ AAAA? 3.openwrt.pool.ntp.org. (40)
    07:55:07.226981 lag0, IN: ethertype IPv4, IP AP55C-IP.37690 > XGS-IP.53: 26+ AAAA? 3.openwrt.pool.ntp.org. (40)
    07:55:07.226981 lag0.34, IN: IP AP55C-IP.37690 > XGS-IP.53: 26+ AAAA? 3.openwrt.pool.ntp.org. (40)
    07:55:07.244869 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.37690: 26 0/0/0 (40)
    07:55:07.244874 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.37690: 26 0/0/0 (40)
    07:55:07.245266 Port6, IN: ethertype IPv4, IP AP55C-IP.56987 > XGS-IP.53: 27+ A? 3.openwrt.pool.ntp.org. (40)
    07:55:07.245266 lag0, IN: ethertype IPv4, IP AP55C-IP.56987 > XGS-IP.53: 27+ A? 3.openwrt.pool.ntp.org. (40)
    07:55:07.245266 lag0.34, IN: IP AP55C-IP.56987 > XGS-IP.53: 27+ A? 3.openwrt.pool.ntp.org. (40)
    07:55:07.263656 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.56987: 27 4/0/0 A 80.152.201.148, A 194.25.134.196, A 176.221.42.125, A 213.239.234.28 (104)
    07:55:07.263659 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.56987: 27 4/0/0 A 80.152.201.148, A 194.25.134.196, A 176.221.42.125, A 213.239.234.28 (104)
    07:55:07.264314 Port5, IN: ethertype IPv4, IP AP55C-IP.45132 > XGS-IP.53: 28+ AAAA? 2.openwrt.pool.ntp.org. (40)
    07:55:07.264314 lag0, IN: ethertype IPv4, IP AP55C-IP.45132 > XGS-IP.53: 28+ AAAA? 2.openwrt.pool.ntp.org. (40)
    07:55:07.264314 lag0.34, IN: IP AP55C-IP.45132 > XGS-IP.53: 28+ AAAA? 2.openwrt.pool.ntp.org. (40)
    07:55:07.264389 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.45132: 28 4/0/0 AAAA 2a03:4000:4e:9ed:34db:7bff:feea:4253, AAAA 2a01:4f8:c17:d8f2::1, AAAA 2a01:4f8:141:31c2::2, AAAA 2a01:4f8:c17:b041::1 (152)
    07:55:07.264392 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.45132: 28 4/0/0 AAAA 2a03:4000:4e:9ed:34db:7bff:feea:4253, AAAA 2a01:4f8:c17:d8f2::1, AAAA 2a01:4f8:141:31c2::2, AAAA 2a01:4f8:c17:b041::1 (152)
    07:55:07.264783 Port8, IN: ethertype IPv4, IP AP55C-IP.53232 > XGS-IP.53: 29+ A? 2.openwrt.pool.ntp.org. (40)
    07:55:07.264783 lag0, IN: ethertype IPv4, IP AP55C-IP.53232 > XGS-IP.53: 29+ A? 2.openwrt.pool.ntp.org. (40)
    07:55:07.264783 lag0.34, IN: IP AP55C-IP.53232 > XGS-IP.53: 29+ A? 2.openwrt.pool.ntp.org. (40)
    07:55:07.286959 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.53232: 29 4/0/0 A 188.68.48.10, A 80.151.186.5, A 5.189.140.236, A 129.70.132.33 (104)
    07:55:07.286963 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.53232: 29 4/0/0 A 188.68.48.10, A 80.151.186.5, A 5.189.140.236, A 129.70.132.33 (104)
    07:55:07.287524 Port6, IN: ethertype IPv4, IP AP55C-IP.54230 > XGS-IP.53: 30+ AAAA? 1.openwrt.pool.ntp.org. (40)
    07:55:07.287524 lag0, IN: ethertype IPv4, IP AP55C-IP.54230 > XGS-IP.53: 30+ AAAA? 1.openwrt.pool.ntp.org. (40)
    07:55:07.287524 lag0.34, IN: IP AP55C-IP.54230 > XGS-IP.53: 30+ AAAA? 1.openwrt.pool.ntp.org. (40)
    07:55:07.287602 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.54230: 30 0/0/0 (40)
    07:55:07.287608 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.54230: 30 0/0/0 (40)
    07:55:07.287989 Port8, IN: ethertype IPv4, IP AP55C-IP.37130 > XGS-IP.53: 31+ A? 1.openwrt.pool.ntp.org. (40)
    07:55:07.287989 lag0, IN: ethertype IPv4, IP AP55C-IP.37130 > XGS-IP.53: 31+ A? 1.openwrt.pool.ntp.org. (40)
    07:55:07.287989 lag0.34, IN: IP AP55C-IP.37130 > XGS-IP.53: 31+ A? 1.openwrt.pool.ntp.org. (40)
    07:55:07.306430 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.37130: 31 4/0/0 A 144.76.138.23, A 185.11.138.90, A 46.4.54.78, A 85.220.190.246 (104)
    07:55:07.306436 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.37130: 31 4/0/0 A 144.76.138.23, A 185.11.138.90, A 46.4.54.78, A 85.220.190.246 (104)
    07:55:07.306986 Port7, IN: ethertype IPv4, IP AP55C-IP.38391 > XGS-IP.53: 32+ AAAA? 0.openwrt.pool.ntp.org. (40)
    07:55:07.306986 lag0, IN: ethertype IPv4, IP AP55C-IP.38391 > XGS-IP.53: 32+ AAAA? 0.openwrt.pool.ntp.org. (40)
    07:55:07.306986 lag0.34, IN: IP AP55C-IP.38391 > XGS-IP.53: 32+ AAAA? 0.openwrt.pool.ntp.org. (40)
    07:55:07.307332 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.38391: 32 0/0/0 (40)
    07:55:07.307338 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.38391: 32 0/0/0 (40)
    07:55:07.307727 Port6, IN: ethertype IPv4, IP AP55C-IP.57859 > XGS-IP.53: 33+ A? 0.openwrt.pool.ntp.org. (40)
    07:55:07.307727 lag0, IN: ethertype IPv4, IP AP55C-IP.57859 > XGS-IP.53: 33+ A? 0.openwrt.pool.ntp.org. (40)
    07:55:07.307727 lag0.34, IN: IP AP55C-IP.57859 > XGS-IP.53: 33+ A? 0.openwrt.pool.ntp.org. (40)
    07:55:07.325214 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.57859: 33 4/0/0 A 213.202.247.29, A 185.120.22.12, A 129.70.132.35, A 188.68.41.203 (104)
    07:55:07.325218 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.57859: 33 4/0/0 A 213.202.247.29, A 185.120.22.12, A 129.70.132.35, A 188.68.41.203 (104)
    07:55:07.373366 Port8, IN: ethertype IPv4, IP AP55C-IP.35489 > XGS-IP.53: 2+ PTR? 1.34.168.192.in-addr.arpa. (43)
    07:55:07.373366 lag0, IN: ethertype IPv4, IP AP55C-IP.35489 > XGS-IP.53: 2+ PTR? 1.34.168.192.in-addr.arpa. (43)
    07:55:07.373366 lag0.34, IN: IP AP55C-IP.35489 > XGS-IP.53: 2+ PTR? 1.34.168.192.in-addr.arpa. (43)
    07:55:07.373472 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.35489: 2 NXDomain* 0/0/0 (43)
    07:55:07.373475 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.35489: 2 NXDomain* 0/0/0 (43)
    07:55:07.374826 Port6, IN: ethertype IPv4, IP AP55C-IP.38611 > XGS-IP.53: 3+ AAAA? wifi.cloud.sophos.com. (39)
    07:55:07.374826 lag0, IN: ethertype IPv4, IP AP55C-IP.38611 > XGS-IP.53: 3+ AAAA? wifi.cloud.sophos.com. (39)
    07:55:07.374826 lag0.34, IN: IP AP55C-IP.38611 > XGS-IP.53: 3+ AAAA? wifi.cloud.sophos.com. (39)
    07:55:07.379855 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.38611: 3 1/0/0 CNAME hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com. (107)
    07:55:07.379859 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.38611: 3 1/0/0 CNAME hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com. (107)
    07:55:07.380861 Port6, IN: ethertype IPv4, IP AP55C-IP.59923 > XGS-IP.53: 4+ AAAA? hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com. (75)
    07:55:07.380861 lag0, IN: ethertype IPv4, IP AP55C-IP.59923 > XGS-IP.53: 4+ AAAA? hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com. (75)
    07:55:07.380861 lag0.34, IN: IP AP55C-IP.59923 > XGS-IP.53: 4+ AAAA? hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com. (75)
    07:55:07.380926 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.59923: 4 0/0/0 (75)
    07:55:07.380928 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.59923: 4 0/0/0 (75)
    07:55:07.381290 Port7, IN: ethertype IPv4, IP AP55C-IP.48812 > XGS-IP.53: 5+ A? wifi.cloud.sophos.com. (39)
    07:55:07.381290 lag0, IN: ethertype IPv4, IP AP55C-IP.48812 > XGS-IP.53: 5+ A? wifi.cloud.sophos.com. (39)
    07:55:07.381290 lag0.34, IN: IP AP55C-IP.48812 > XGS-IP.53: 5+ A? wifi.cloud.sophos.com. (39)
    07:55:07.381359 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.48812: 5 4/0/0 CNAME hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com., A 99.80.207.79, A 52.51.156.20, A 63.33.113.220 (155)
    07:55:07.381363 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.48812: 5 4/0/0 CNAME hub-wifi-spinnaker-1194699162.eu-west-1.elb.amazonaws.com., A 99.80.207.79, A 52.51.156.20, A 63.33.113.220 (155)
    07:55:07.381815 Port8, IN: ethertype IPv4, IP AP55C-IP.43095 > XGS-IP.53: 6+ PTR? 79.207.80.99.in-addr.arpa. (43)
    07:55:07.381815 lag0, IN: ethertype IPv4, IP AP55C-IP.43095 > XGS-IP.53: 6+ PTR? 79.207.80.99.in-addr.arpa. (43)
    07:55:07.381815 lag0.34, IN: IP AP55C-IP.43095 > XGS-IP.53: 6+ PTR? 79.207.80.99.in-addr.arpa. (43)
    07:55:07.385119 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.43095: 6 1/0/0 PTR ec2-99-80-207-79.eu-west-1.compute.amazonaws.com. (105)
    07:55:07.385122 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.43095: 6 1/0/0 PTR ec2-99-80-207-79.eu-west-1.compute.amazonaws.com. (105)
    07:55:07.385587 Port7, IN: ethertype IPv4, IP AP55C-IP.42279 > XGS-IP.53: 7+ PTR? 20.156.51.52.in-addr.arpa. (43)
    07:55:07.385587 lag0, IN: ethertype IPv4, IP AP55C-IP.42279 > XGS-IP.53: 7+ PTR? 20.156.51.52.in-addr.arpa. (43)
    07:55:07.385587 lag0.34, IN: IP AP55C-IP.42279 > XGS-IP.53: 7+ PTR? 20.156.51.52.in-addr.arpa. (43)
    07:55:07.389611 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.42279: 7 1/0/0 PTR ec2-52-51-156-20.eu-west-1.compute.amazonaws.com. (105)
    07:55:07.389614 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.42279: 7 1/0/0 PTR ec2-52-51-156-20.eu-west-1.compute.amazonaws.com. (105)
    07:55:07.390036 Port7, IN: ethertype IPv4, IP AP55C-IP.38062 > XGS-IP.53: 8+ PTR? 220.113.33.63.in-addr.arpa. (44)
    07:55:07.390036 lag0, IN: ethertype IPv4, IP AP55C-IP.38062 > XGS-IP.53: 8+ PTR? 220.113.33.63.in-addr.arpa. (44)
    07:55:07.390036 lag0.34, IN: IP AP55C-IP.38062 > XGS-IP.53: 8+ PTR? 220.113.33.63.in-addr.arpa. (44)
    07:55:07.394844 lag0.34, OUT: IP XGS-IP.53 > AP55C-IP.38062: 8 1/0/0 PTR ec2-63-33-113-220.eu-west-1.compute.amazonaws.com. (107)
    07:55:07.394847 lag0, OUT: ethertype IPv4, IP XGS-IP.53 > AP55C-IP.38062: 8 1/0/0 PTR ec2-63-33-113-220.eu-west-1.compute.amazonaws.com. (107)

Children
No Data