• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 155
  • Last Modified:

Packet loss between Netgear GS748T and Draytek Vigor 2860

Hello

Hoping someone can point us in the right direction after pulling my hair out for the last 2 days on this one.

We have recently installed 2 Netgear GS748T switches (single link connection between the two) into a client's site (approx 30 users but site wanted all wall ports patching in). Since then they keep getting random disconnects on the internet line, but not all at the same time though.

We ran some ping tests through the network - all pings to anything on the internal network is fine, no drops, even after several hours. However pings to the router itself (and internet) are showing sporadic packet drops (anything from 2-7 drops per 10 minutes).

The Draytek uses 2 VLANs - 1 for data (which is connected to the Netgear switches), and another for the phone system (which also seems to be having issues as a result of this too which lead us to suspect the router may be faulty.

We connected to a spare port on the router on the data vlan and confirmed still having the issue when directly connected. So we swapped out the router and the network cable - still having same issues.

I've tried disabling STP, no change. DOS defense is not enabled on either system, we are using VLANs and all of these are setup correctly, no QoS in use either.

The router is on the latest firmware, the switches are on firmware 6.3.1.11.

At present I'm not sure what else to look at or try - there's obviously something happening between the switch and router but for the life of me can't work out what.

Anyone have any helpful suggestions on this? Anyone come across this before?

Thanks in advance.
0
Andy M
Asked:
Andy M
  • 3
  • 2
3 Solutions
 
pgm554Commented:
I would look at the duplex settings on the router and the switches and make sure everything is set to auto.
Any manual duplex settings should be avoided at all costs.
0
 
Andy MIT Systems ManagerAuthor Commented:
As far as I can tell everything is on auto - switch definitely, I'm not sure if you can change it on the Draytek router.
0
 
pgm554Commented:
0
The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

 
QlemoDeveloperCommented:
If you loose ping packets for an internal IP sporadically, it is a sure sign for overload of the LAN connection or the device. ICMP packets are more likely to be dismissed on overload because considered as unimportant (better drop a ping than a data packet).

Overload can be the result of sustained attacks from Internet, too many rules to check for traffic in the firewall, too much traffc, and much more.
0
 
Andy MIT Systems ManagerAuthor Commented:
Thanks for the suggestions guys. Turns out it was a loop on the internal network - someone had plugged in another switch into a wall port in a room in the building - once we removed this it all started working again normally. Bit strange that it only affected connections to the router but at least it's sorted.
0
 
Andy MIT Systems ManagerAuthor Commented:
Found issue was relating to a network loop in the end. Gave assisted points to others as good suggestions.
0

Featured Post

Managing Security Policy in a Changing Environment

The enterprise network environment is evolving rapidly as companies extend their physical data centers to embrace cloud computing and software-defined networking. This new reality means that the challenge of managing the security policy is much more dynamic and complex.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now