This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos AP10 behind RED

mikkeland over 10 years ago

Hi,

Having some issues with an AP10 behind a RED.
RED setup

Uplink mode: Client
Operation mode: Standard/unified
Branch office internet connection is 6 MBit ADSL with dynamic IP address
RED interface has been added to "Allowed wireless interfaces"

AP details

AP has been approved from "Pending access points"
AP is listed as Inactive with an unknown MAC address
AP is attached directly to the RED (nearest switch has been tried as well)
AP responds to PING, but intermittently 1-5 packets are lost (no packet loss to other hosts on subnet)
A single Wireless network has been attached to the AP

Wireless log shows

2014:03:21-15:01:25 firewall-1 awed[25301]: [MASTER] new connection from 10.18.1.105:3831

2014:03:21-15:01:25 firewall-1 awed[2816]: [AP10 A4001121CFA1A52] AP10 from 10.18.1.105:3831 identified as A4001121CFA1A52

2014:03:21-15:01:25 firewall-1 awed[2816]: [AP10 A4001121CFA1A52] (Re-)loaded identity and/or configuration

2014:03:21-15:01:28 firewall-1 awed[2778]: [AP10 A4001121CFA1A52] failed to send /etc/wireless/firmware/AP10.uimage to device, dropping.

2014:03:21-15:02:14 firewall-1 awed[25301]: [MASTER] new connection from 10.18.1.105:3832

2014:03:21-15:02:14 firewall-1 awed[2913]: [AP10 A4001121CFA1A52] AP10 from 10.18.1.105:3832 identified as A4001121CFA1A52

2014:03:21-15:02:14 firewall-1 awed[2913]: [AP10 A4001121CFA1A52] (Re-)loaded identity and/or configuration

2014:03:21-15:02:17 firewall-1 awed[2816]: [AP10 A4001121CFA1A52] failed to send /etc/wireless/firmware/AP10.uimage to device, dropping.

RED log shows


2014:03:21-15:02:13 firewall-1 red_server[26955]: A32008F8FF515E1: PONG local_tx=47018

2014:03:21-15:02:14 firewall-1 redctl[2914]: 10.18.1.105 =

2014:03:21-15:02:14 firewall-1 redctl[2914]: 10.18.1.105

2014:03:21-15:02:29 firewall-1 red_server[26955]: A32008F8FF515E1: command 'PING 50619 uplink=WAN'

There are no relevant entries in the Firewall log

The AP has been power cycled multiple times
Wireless protection has been disabled/enabled on the UTM220

please advise what to do

Sincerely
Mikkel

This thread was automatically locked due to age.

Parents

0 BAlfson over 10 years ago

Mikkel, have you resolved your issue?

If not, please refer to #1 in https://community.sophos.com/products/unified-threat-management/astaroorg/f/51/t/22065, and show any related lines. For the Firewall logs, the Live Log contains less information, so you should always post here the corresponding line(s) from the full log file.

Oh, and note that ping behavior is regulated on the 'ICMP' tab of 'Firewall'.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 mikkeland over 10 years ago in reply to BAlfson
Mikkel, have you resolved your issue?

If not, please refer to #1 in http://www.astaro.org/gateway-products/general-discussion/49065-rulz.html, and show any related lines.  For the Firewall logs, the Live Log contains less information, so you should always post here the corresponding line(s) from the full log file.

Oh, and note that ping behavior is regulated on the 'ICMP' tab of 'Firewall'.

Cheers - Bob

Hi,

Intrusion Prevention and Application Control logs are both empty
Wireless protection logs (not live) still just shows
2014:03:25-00:02:30 firewall-1 redctl[17761]: 10.18.1.5 =
2014:03:25-00:02:30 firewall-1 redctl[17761]:   10.18.1.5
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 80204 uplink=WAN'
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=80204 local_rx=80211 diff=-7
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=57136
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 80977 uplink=WAN'
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=80977 local_rx=80983 diff=-6
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=57784
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 81746 uplink=WAN'
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=81746 local_rx=81749 diff=-3
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=58424
2014:03:25-00:03:14 firewall-1 redctl[17771]: 10.18.1.5 =
2014:03:25-00:03:14 firewall-1 redctl[17771]:   10.18.1.5
2014:03:25-00:03:21 firewall-1 red_server[5392]: SELF: (Re-)loading device configurations
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 82529 uplink=WAN'
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=82529 local_rx=82553 diff=-24
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=59103
2014:03:25-00:03:22 firewall-1 red_server[5392]: SELF: (Re-)loading device configurations
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 83392 uplink=WAN'
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=83392 local_rx=83409 diff=-17
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=59771
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 84250 uplink=WAN'
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=84250 local_rx=84262 diff=-12
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=60352
2014:03:25-00:04:03 firewall-1 redctl[18146]: 10.18.1.5 =
2014:03:25-00:04:03 firewall-1 redctl[18146]:   10.18.1.5

RED logs show
2014:03:25-00:02:30 firewall-1 redctl[17761]: 10.18.1.5 =
2014:03:25-00:02:30 firewall-1 redctl[17761]:   10.18.1.5
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 80204 uplink=WAN'
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=80204 local_rx=80211 diff=-7
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=57136
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 80977 uplink=WAN'
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=80977 local_rx=80983 diff=-6
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=57784
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 81746 uplink=WAN'
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=81746 local_rx=81749 diff=-3
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=58424
2014:03:25-00:03:14 firewall-1 redctl[17771]: 10.18.1.5 =
2014:03:25-00:03:14 firewall-1 redctl[17771]:   10.18.1.5
2014:03:25-00:03:21 firewall-1 red_server[5392]: SELF: (Re-)loading device configurations
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 82529 uplink=WAN'
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=82529 local_rx=82553 diff=-24
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=59103
2014:03:25-00:03:22 firewall-1 red_server[5392]: SELF: (Re-)loading device configurations
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 83392 uplink=WAN'
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=83392 local_rx=83409 diff=-17
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=59771
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 84250 uplink=WAN'
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=84250 local_rx=84262 diff=-12
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=60352
2014:03:25-00:04:03 firewall-1 redctl[18146]: 10.18.1.5 =
2014:03:25-00:04:03 firewall-1 redctl[18146]:   10.18.1.5

So unfortunately no progress :-/

/M
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 mikkeland over 10 years ago in reply to BAlfson
Mikkel, have you resolved your issue?

If not, please refer to #1 in http://www.astaro.org/gateway-products/general-discussion/49065-rulz.html, and show any related lines.  For the Firewall logs, the Live Log contains less information, so you should always post here the corresponding line(s) from the full log file.

Oh, and note that ping behavior is regulated on the 'ICMP' tab of 'Firewall'.

Cheers - Bob

Hi,

Intrusion Prevention and Application Control logs are both empty
Wireless protection logs (not live) still just shows
2014:03:25-00:02:30 firewall-1 redctl[17761]: 10.18.1.5 =
2014:03:25-00:02:30 firewall-1 redctl[17761]:   10.18.1.5
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 80204 uplink=WAN'
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=80204 local_rx=80211 diff=-7
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=57136
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 80977 uplink=WAN'
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=80977 local_rx=80983 diff=-6
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=57784
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 81746 uplink=WAN'
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=81746 local_rx=81749 diff=-3
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=58424
2014:03:25-00:03:14 firewall-1 redctl[17771]: 10.18.1.5 =
2014:03:25-00:03:14 firewall-1 redctl[17771]:   10.18.1.5
2014:03:25-00:03:21 firewall-1 red_server[5392]: SELF: (Re-)loading device configurations
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 82529 uplink=WAN'
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=82529 local_rx=82553 diff=-24
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=59103
2014:03:25-00:03:22 firewall-1 red_server[5392]: SELF: (Re-)loading device configurations
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 83392 uplink=WAN'
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=83392 local_rx=83409 diff=-17
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=59771
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 84250 uplink=WAN'
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=84250 local_rx=84262 diff=-12
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=60352
2014:03:25-00:04:03 firewall-1 redctl[18146]: 10.18.1.5 =
2014:03:25-00:04:03 firewall-1 redctl[18146]:   10.18.1.5

RED logs show
2014:03:25-00:02:30 firewall-1 redctl[17761]: 10.18.1.5 =
2014:03:25-00:02:30 firewall-1 redctl[17761]:   10.18.1.5
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 80204 uplink=WAN'
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=80204 local_rx=80211 diff=-7
2014:03:25-00:02:33 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=57136
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 80977 uplink=WAN'
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=80977 local_rx=80983 diff=-6
2014:03:25-00:02:49 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=57784
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 81746 uplink=WAN'
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=81746 local_rx=81749 diff=-3
2014:03:25-00:03:05 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=58424
2014:03:25-00:03:14 firewall-1 redctl[17771]: 10.18.1.5 =
2014:03:25-00:03:14 firewall-1 redctl[17771]:   10.18.1.5
2014:03:25-00:03:21 firewall-1 red_server[5392]: SELF: (Re-)loading device configurations
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 82529 uplink=WAN'
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=82529 local_rx=82553 diff=-24
2014:03:25-00:03:22 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=59103
2014:03:25-00:03:22 firewall-1 red_server[5392]: SELF: (Re-)loading device configurations
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 83392 uplink=WAN'
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=83392 local_rx=83409 diff=-17
2014:03:25-00:03:38 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=59771
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: command 'PING 84250 uplink=WAN'
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: PING remote_tx=84250 local_rx=84262 diff=-12
2014:03:25-00:03:54 firewall-1 red_server[10876]: A32008F8FF515E1: PONG local_tx=60352
2014:03:25-00:04:03 firewall-1 redctl[18146]: 10.18.1.5 =
2014:03:25-00:04:03 firewall-1 redctl[18146]:   10.18.1.5

So unfortunately no progress :-/

/M
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data