![Avatar of philipfarnes](https://filedb.experts-exchange.com/files/public/2013/11/18/5e28af60-af8d-4dfe-9f5a-aeb4e33dddb1.png)
philipfarnes
asked on
internet/wan drop out
Hi,
I have a bizarre situation happening on my network. We have 5 Dell powerconnect 6224 poe gigabit switches, running with a mitel phonesystem, a managed pacnet mpls router for wan, and sonicwall 2400. Basically what is happening it the the internet randomly drops out for 3 minutes, 10-15 seconds or sometimes never comes back. Also sometimes the wan link drops out. To clear this a reboot of the sonicwall fixes it, but then we get drop outs of 10-15 seconds.
We have tried new sonicwall, latest firmware, got sonicwall to check the rules and they say every thing is ok. One thing that bothers me is that there is no layer3 routing setup and everyones default gateway is the sonicwall. one time we left the internet down to fix the problem on new firewall, and switched cat 5 leads back to previous firewall that was running ok at the time and this had the same problem. after 20 minutes the internet came back. We have checked with ISP and they say nothing is wrong, done multiple tests with them over 3 days.
i have a sys logger on running to the sonicwall and during the first drop out there is just a gap in the logs, also i am runnning ptrg on the lan but nothing really stands out. Also the sonicwall has max number of 32000 connections and its peak has only ever been 2400. there are about 120 users. also the internet link is a 8mb leased line, and we have a 2mb fail over line that flicks over when 7.5mb is used up. I have tried to recreate the problem by downloading 2 x 3gb iso but the link stays up but slow.
a colleague of mine suggested it maybe skype and supernodes problem. I am not sure about this.
the only thing i have not done is update firmware on dells, or changed config for layer3 routing on the switches, which is a major job.
Any suggestions please help. I thing it is the dell powerconnect that is doing dodgy things with traffic, but it does not explain why the firewall reboots it self. Or have i got multiple problems here?
Thanks
Phil
I have a bizarre situation happening on my network. We have 5 Dell powerconnect 6224 poe gigabit switches, running with a mitel phonesystem, a managed pacnet mpls router for wan, and sonicwall 2400. Basically what is happening it the the internet randomly drops out for 3 minutes, 10-15 seconds or sometimes never comes back. Also sometimes the wan link drops out. To clear this a reboot of the sonicwall fixes it, but then we get drop outs of 10-15 seconds.
We have tried new sonicwall, latest firmware, got sonicwall to check the rules and they say every thing is ok. One thing that bothers me is that there is no layer3 routing setup and everyones default gateway is the sonicwall. one time we left the internet down to fix the problem on new firewall, and switched cat 5 leads back to previous firewall that was running ok at the time and this had the same problem. after 20 minutes the internet came back. We have checked with ISP and they say nothing is wrong, done multiple tests with them over 3 days.
i have a sys logger on running to the sonicwall and during the first drop out there is just a gap in the logs, also i am runnning ptrg on the lan but nothing really stands out. Also the sonicwall has max number of 32000 connections and its peak has only ever been 2400. there are about 120 users. also the internet link is a 8mb leased line, and we have a 2mb fail over line that flicks over when 7.5mb is used up. I have tried to recreate the problem by downloading 2 x 3gb iso but the link stays up but slow.
a colleague of mine suggested it maybe skype and supernodes problem. I am not sure about this.
the only thing i have not done is update firmware on dells, or changed config for layer3 routing on the switches, which is a major job.
Any suggestions please help. I thing it is the dell powerconnect that is doing dodgy things with traffic, but it does not explain why the firewall reboots it self. Or have i got multiple problems here?
Thanks
Phil
![Avatar of Cas Krist](https://filedb.experts-exchange.com/files/public/2013/11/18/09216946-82ea-45ab-8e98-64d50203b089.png)
Hi,
Please check your configuration. Set your WAN-MTU according to this article:
https://www.experts-exchange.com/Hardware/Networking_Hardware/Firewalls/A_3110-Setting-WAN-MTU-Size-For-Sonicwall-Appliances.html (from digitap)
Set your WAN connection Link Speed to fixed (eg 100Mb - full duplex), check what your sonicwall uses now. (second TAB of properties of your WAN-interface, X1)
Also check on this TAB "Fragment non-VPN outbound packets larger than this Interface's MTU", so enable it.
Please check your configuration. Set your WAN-MTU according to this article:
https://www.experts-exchange.com/Hardware/Networking_Hardware/Firewalls/A_3110-Setting-WAN-MTU-Size-For-Sonicwall-Appliances.html (from digitap)
Set your WAN connection Link Speed to fixed (eg 100Mb - full duplex), check what your sonicwall uses now. (second TAB of properties of your WAN-interface, X1)
Also check on this TAB "Fragment non-VPN outbound packets larger than this Interface's MTU", so enable it.
![Avatar of philipfarnes](https://filedb.experts-exchange.com/files/public/2013/11/18/5e28af60-af8d-4dfe-9f5a-aeb4e33dddb1.png)
ASKER
All wan and internet traffic. Sonicwall has no cli. Mpls router managed and I have no access.
![Avatar of Cas Krist](https://filedb.experts-exchange.com/files/public/2013/11/18/09216946-82ea-45ab-8e98-64d50203b089.png)
sonicwall has a CLI
![Avatar of Cas Krist](https://filedb.experts-exchange.com/files/public/2013/11/18/09216946-82ea-45ab-8e98-64d50203b089.png)
And in the interface you can ping, traceroute and even capture packets.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
![Avatar of philipfarnes](https://filedb.experts-exchange.com/files/public/2013/11/18/5e28af60-af8d-4dfe-9f5a-aeb4e33dddb1.png)
ASKER
no comment
Does the sonicwall have a CLI or GUI interface that can do ping and tracert tests during the outage?
Can you set PTRG to monitor the MPLS router and an IP address from you ISP ( like a DNS server or something) along with the sonicwall?