Messages

I just completely removed the backup firewall/router from my network, and all is working correctly. Until I get this resolved, I will not connect the backup unit to my network. It is amazing how little help I got from these forums! I wonder if I paid for a license (which I'm inclined to do so there are no excuses for lack of support), I would get the same treatment from the pricey support.

Thank you all,

Martin M. Mune
US Army Combat Veteran
Operation Iraqi Freedom
 
Volunteer Soldier
International Legion for the Defense of Ukraine

Слава Україні!
Героям Слава!

[only]

I setup two Sophos XG210 devices to be my primary and backup router/firewall. These devices are identical, and the hardware is working (all ports are functional, etc.). I have setup CARP and HA correctly and the 1:1 NAT for the (ISP Static IP address assignment) WAN addresses are working. Similar setup on the LAN side: for each router/firewall, the LAN ports are connected to ports 40 and 41 on a 2-stack Dell Force10 S55T switch. The switch holds all the VLANs and the router takes care of the inter-VLAN traffic. Both routers are PFSYNCing without any issues.

However, the HA setup (see attached PDF doc) keeps flapping between the primary and backup routers. When the switch to the backup router happens, I lose all connectivity to the internet and VLANs. This is becoming a very annoying issue as everything stops! I looked at the configuration on both routers/firewalls, switch, Internet access and it all looks good. What I think is happening is that somehow the heartbeat between the two routers is skipping a few beats and it drops the kicks the switch to the backup router only on the LAN interface. That is about the only thing I noticed that might be a red flag: only the LAN interface switches to the backup router and, when it happens, all connectivity drops.

More on my setup:

Dell Force10 S55T (2 stacked)
VLAN101, VLAN201, VLAN301, VLAN401, VLAN501, VLAN601
Trunk Ports set to interfaces 0/40-43
VLAN101 holds all my servers (AD, DHCP, DNS, FS, Wireless Controller, etc.)

Sophos XG210 Rev. 3 (2 identical devices in HA configuration)
Port igb1 set as WAN
Port igb0 set as LAN (also routing all inter-VLAN traffic)
Port igb5 set as the SYNC interfaces

I setup both a virtual and physical lab with the same hardware (only one Force10 S55T switch) and the configuration works without any issues. No flapping or unexpected switches between primary and backup. Has anyone encountered this issue before? I would appreciate any assistance with this issue.

I'm experiencing the same issue. Each time it happens, I lose internet connection as well as access to my primary firewall. I'm using two identical Sophos XG210 Rev. 3 devices as my router/firewalls. Is it possible that the heartbeat between the two devices somehow skips a "beat" here and there causing a false positive to trigger the switch between the primary and backup units? I'm attaching the HA configuration diagram I setup for reference.

Martin M. Mune
US Army Combat Veteran
Operation Iraqi Freedom
 
Volunteer Soldier
International Legion for the Defense of Ukraine

Слава Україні!
Героям Слава!