Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 17 replies
  • Answers 1 answer
  • Subscribers 7 subscribers
  • Views 40842 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Needing to reboot the UTM

RChadwick

For years, whenever I had a cable modem issue, and I called for tech support, I'd quietly chuckle when they would ask me to unplug the power to my router. However, a few weeks ago, that was what it took for my Internet to come back (Not literally removing power, but a reboot). I thought it was a fluke until it happened again tonight. The connection status showed it was UP, but also showed ERROR. Rebooting the UTM fixed everything. I'd like to find the root cause, but not sure where to start. I'm running 9.409-9 in an ESXi VM, both network adapters are configured VMXNET3. Where should I start looking?

Thanks!



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    Well the logs are not that informative on this, but you should be able to trace it in the Service Deamon logs.

     

    That being said, uplink errors can be caused by a number of things, usually negotiation with provider router/CPE.

    Havent head of any problems yet regarding VMXNET3 and VMWare.

    You might want to try to set the wan interface to a forced speed and if possible get the provider to do the same in their end - remember to ask about their MTU values.

     

    If this does not work try to disable automatic monitoring for WAN interface and manually create a new monitoring host

    Interfaces ->  Routing- > Uplink Monitoring -> advanced ; create a new Monitoring Host like Google DNS ( create host with IP Address 8.8.8.8 )

     

    If your want interface is having negotiation or MTU issues, the selv monitoring on the interface will report error.

     

    Hope you find the bug :-)

  • 0 in reply to Vels

    Thanks for the response.

    How do I change the interface to force a speed? Is that done in ESXi? I just found in UTM where it gives the interface info, but can't change anything.

     

    If this happened every day, it might be easier/quicker to troubleshoot this :)

  • 0 in reply to RChadwick

    Hi RChadwick,

    I think you will need to change the NIC speed for VM images from the windows network settings, changing it from the Web Admin GUI will not help. You need to change the speed duplex from the Network & settings / Advance / Media Type / NIC Speed. 

    Any help?

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0 in reply to sachingurung

    I changed it from Auto to 1000 full duplex. So far, it's good, but since the problem seems to happen every few weeks on average, it might be a while before I can tell for sure.

  • 0 in reply to RChadwick

    Well, changing the speed might have helped (Went a whole month this time), but it happened again today. Restarting the modem, and unplugging/replugging the ethernet WAN cable had no effect. Rebooting the UTM fixed it. Is there by chance a feature that would reboot the UTM automatically if the WAN link shows ERROR?

  • 0 in reply to RChadwick

    Check #7.7 in Rulz - you will want to set the modem on 1000/Full fixed also.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Thanks for the response.

    The modem doesn't have any adjustments, other than looking through logs and resetting it. I configured ESXi to lock the port at 1000/Full.

    A week or two ago I replaced the modem with a newer one. Same manufacturer, same lack of config.

    It just happened again a few minutes ago. Is there anything else I can do?

  • 0 in reply to RChadwick

    If it helps anyone with the same problem, I wrote a script running on a VM that checks for Internet, and after 10 minutes reboots the UTM. The script log shows it still happens every few weeks or so, but I haven't noticed it.

  • 0 in reply to RChadwick

    ^^Can you share?  This would be useful to have.

  • 0 in reply to Jay Jay

    RebootSophosRouter.zip

    I attached my script. It's crude, and I never cleaned it up for public use, but it works. You need to add the IP address of your UTM, and the UTM password in two locations. It pings a few different locations to keep the UTM from rebooting if a single website is down.

  • 0 in reply to RChadwick

    ^^Thanks for posting.  This runs under windows correct, not as a cron job on the firewall?  I wonder if something like this could be implemented within sophos itself. 

  • 0 in reply to Jay Jay

    Yes, this runs on a Windows machine, not on the UTM itself.

Reply Children
No Data
Unfiltered HTML