Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 7 subscribers
  • Views 23850 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

High Availability and PPPoE?

Louis-M

I have HA setup and working. Both are on a esxi host with the active/standby on the same vswitch which is port channeled to a cisco switch where there is one connection to the internet via FTTC using PPPoE to authenticate.
If I reboot the master to test the failover, we lose the internet connection until it re authenticates. Is this normal behavior?



This thread was automatically locked due to age.
  • 0 in reply to Louis-M

    Doesn't any momentary disconnection cause the ISP's equipment to request a re-auth?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to Louis-M

    It's true that your second VM is constantly on but it's not authenticated until the heartbeat senses a disconnection, at which time it requests auth.

    My disconnect time is a bit shorter at around 5 seconds. I've even tried connecting the second UTM to another modem. My ISP allows 2 authentications from the same IP address so the thought was that if I have 2 full connection streams that the delay could be eliminated but that didn't work out. The backup UTM didn't authenticate until that disconnection and even with a second modem (each UTM connected to its own modem) I still experienced that delay.

  • 0 in reply to NashBrydges

    Last time I worked with DSL service I simply had the modem handle the PPPoE authentication so you could do whatever you wanted to the network without hanging up the connection to the ISP. Could the same be done with your modem?

  • 0 in reply to Dlabun

    Unfortunately not. It's purely a vdsl modem which operates as a bridge and needs an ethernet device to authenticate. Obviously this could be a router but I'm not fussed really as this is a test rig.

    Our soon to be live rigs won't suffer from this as our upstream devices are Cisco routers or switches which handle the authentication there.

Unfiltered HTML