Solved

Sonicwall TZ 190

Posted on 2010-08-24
6
364 Views
Last Modified: 2012-05-10
I have one subnet 192.168.2.0

I have two TZ190 routers with both WAN and OPT being assigned public IP's from 4 different providers.  
TZ190 router 1 has a gateway of 192.168.2.1
TZ190 router 2 has a gateway of 192.168.2.2

Several servers on my LAN.  some servers use 192.168.2.1 as the gateway and the router 1 has NAT policy's with ports for web server as an example

Several servers on my LAN use 192.168.2.2 as the gateway and the router 2 has NAT policys with web email servers as an example.

All i have is the two sonic walls and since they are both on the same subnet I have an ethernet cable going from router1 to router2.  All my servers are pluged in to router 1 and I run vmware ESX.

Everything has been working fine for months. Suddenly, yesterday router 1 stopped responding and all the servers that were using that router went down. I logged in to one of the servers by coming in from router2 and did a continuous ping on router 1 192.168.2.1

It would stop responding for many pings and then would respond every 4th 8th ping with a long time like 800ms.  I replaced the router with an exact one and imported the exact configuration and the problem was gone. Next day at 8:00 AM the issue kinda came back so rebooted the router this time and it went away. Same day at 5PM the router refused to respond and then I replaced it as well with a new one. This was 3 hrs ago and everything is fine. I'm terrified that since I don't know the root cause this issue will appear again. Just to recap this configuration and setup has been running the same way for months without an issue.

Any suggestions?
0
Comment
Question by:webiis
  • 3
  • 2
6 Comments
 
LVL 24

Expert Comment

by:bryon44035v3
Comment Utility
this is pretty odd, with all the troubleshooting you have done, lets go theoretical for a second.

did you replace the wire that connects the two routers?  is it straight-thru and you're relying on auto-crossover?  what if you use a real crossover cable instead?  what if you put a dumb 5port switch in between the two routers?

did anyone run a new power cable right next to the ethernet cord that connects the routers?  looking for some kind of interference here.  it's probably not the router you replaced... is it the router you didn't replace yet?  do constant pings to other things stay up, while the ping to the other router went down?

is the problematic router on the bottom of a stack of stuff, maybe getting too hot?

0
 

Author Comment

by:webiis
Comment Utility
Good point!   From any server I can ping router 192.168.2.2 without issue. The one that has the issue is 192.168.2.1. When I ping I'm pinging from many servers that are plugged in to 192.168.2.1 and the result is the same, separate cables, all in a data center rack. There is not switch on the LAN side. Just a cable between the two sonic walls. Each sonic wall has an 8port LAN switch built in.
0
 
LVL 24

Accepted Solution

by:
bryon44035v3 earned 500 total points
Comment Utility
so the only thing in common is, 192.168.2.1.  the crossconnect cable is ruled out by the fact that local devices on 2.1 have the same issue

so.... what's left...

1. overheating
2. overprocessing.  how many things are plugged into this 2.1 router, and how much TRAFFIC are they trying to push/pull?  are they overrunning the capability of the 2.1 router?  

are the wan ports of 2.1 highly exposed (remote services, exchange, rww, owa, oma, etc) such that you may be a target of a denial of service attack?

how do pings from external to the wan port of 2.1 look, when the internal slows down and is unreachable?

you could install prtg network monitor inside and/or outside, it will monitor things every second and create line graphs so you can see if it's going down, slowing down, unreachable, and more importantly if it always happens at a certain time of day.  then it's just a matter of matching that time to your logs and see what's going on.
0
Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

 
LVL 24

Expert Comment

by:bryon44035v3
Comment Utility
oh and my particular favorite - a loose power cable sufficiently loose such that whenever a datacenter employee walks past your rack, the device reboots.  

i had that happen once, took out an MSA cabinet of hard drives... demanded to see the video tapes, and then the datacenter babysitter admitted that my door looked loose so he pushed on it - didn't realize he pushed a server 2008 dvd box which flipped the switch on the back
0
 
LVL 33

Expert Comment

by:digitap
Comment Utility
So, how do you have the sonicwalls connected to each other?  If you have the LAN interfaces configured on the same subnet AND you have other servers connected to them, then you must have them all connected to the same switch, right?  have you looked at the switch as a problem?  have you looked at half/full duplex or setting the speed of the port?
0
 
LVL 33

Expert Comment

by:digitap
Comment Utility
so, what was the solution?  i see lots of possibilities in the solution you chose.
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now