Solved

Sonicwall TZ 190

Posted on 2010-08-24
6
371 Views
Last Modified: 2012-05-10
I have one subnet 192.168.2.0

I have two TZ190 routers with both WAN and OPT being assigned public IP's from 4 different providers.  
TZ190 router 1 has a gateway of 192.168.2.1
TZ190 router 2 has a gateway of 192.168.2.2

Several servers on my LAN.  some servers use 192.168.2.1 as the gateway and the router 1 has NAT policy's with ports for web server as an example

Several servers on my LAN use 192.168.2.2 as the gateway and the router 2 has NAT policys with web email servers as an example.

All i have is the two sonic walls and since they are both on the same subnet I have an ethernet cable going from router1 to router2.  All my servers are pluged in to router 1 and I run vmware ESX.

Everything has been working fine for months. Suddenly, yesterday router 1 stopped responding and all the servers that were using that router went down. I logged in to one of the servers by coming in from router2 and did a continuous ping on router 1 192.168.2.1

It would stop responding for many pings and then would respond every 4th 8th ping with a long time like 800ms.  I replaced the router with an exact one and imported the exact configuration and the problem was gone. Next day at 8:00 AM the issue kinda came back so rebooted the router this time and it went away. Same day at 5PM the router refused to respond and then I replaced it as well with a new one. This was 3 hrs ago and everything is fine. I'm terrified that since I don't know the root cause this issue will appear again. Just to recap this configuration and setup has been running the same way for months without an issue.

Any suggestions?
0
Comment
Question by:webiis
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 24

Expert Comment

by:B H
ID: 33517369
this is pretty odd, with all the troubleshooting you have done, lets go theoretical for a second.

did you replace the wire that connects the two routers?  is it straight-thru and you're relying on auto-crossover?  what if you use a real crossover cable instead?  what if you put a dumb 5port switch in between the two routers?

did anyone run a new power cable right next to the ethernet cord that connects the routers?  looking for some kind of interference here.  it's probably not the router you replaced... is it the router you didn't replace yet?  do constant pings to other things stay up, while the ping to the other router went down?

is the problematic router on the bottom of a stack of stuff, maybe getting too hot?

0
 

Author Comment

by:webiis
ID: 33517386
Good point!   From any server I can ping router 192.168.2.2 without issue. The one that has the issue is 192.168.2.1. When I ping I'm pinging from many servers that are plugged in to 192.168.2.1 and the result is the same, separate cables, all in a data center rack. There is not switch on the LAN side. Just a cable between the two sonic walls. Each sonic wall has an 8port LAN switch built in.
0
 
LVL 24

Accepted Solution

by:
B H earned 500 total points
ID: 33517443
so the only thing in common is, 192.168.2.1.  the crossconnect cable is ruled out by the fact that local devices on 2.1 have the same issue

so.... what's left...

1. overheating
2. overprocessing.  how many things are plugged into this 2.1 router, and how much TRAFFIC are they trying to push/pull?  are they overrunning the capability of the 2.1 router?  

are the wan ports of 2.1 highly exposed (remote services, exchange, rww, owa, oma, etc) such that you may be a target of a denial of service attack?

how do pings from external to the wan port of 2.1 look, when the internal slows down and is unreachable?

you could install prtg network monitor inside and/or outside, it will monitor things every second and create line graphs so you can see if it's going down, slowing down, unreachable, and more importantly if it always happens at a certain time of day.  then it's just a matter of matching that time to your logs and see what's going on.
0
Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

 
LVL 24

Expert Comment

by:B H
ID: 33517459
oh and my particular favorite - a loose power cable sufficiently loose such that whenever a datacenter employee walks past your rack, the device reboots.  

i had that happen once, took out an MSA cabinet of hard drives... demanded to see the video tapes, and then the datacenter babysitter admitted that my door looked loose so he pushed on it - didn't realize he pushed a server 2008 dvd box which flipped the switch on the back
0
 
LVL 33

Expert Comment

by:digitap
ID: 33518057
So, how do you have the sonicwalls connected to each other?  If you have the LAN interfaces configured on the same subnet AND you have other servers connected to them, then you must have them all connected to the same switch, right?  have you looked at the switch as a problem?  have you looked at half/full duplex or setting the speed of the port?
0
 
LVL 33

Expert Comment

by:digitap
ID: 33541482
so, what was the solution?  i see lots of possibilities in the solution you chose.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
The Cisco RV042 router is a popular small network interfacing device that is often used as an internet gateway. Network administrators need to get at the management interface to make settings, change passwords, etc. This access is generally done usi…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question