Watchguard - No network access through wwitch

Gavin Reid
Gavin Reid used Ask the Experts™
on
Hi, I have a really odd problem with a Watchguard XTM25-W Firewall.  It has the latest Fireware on it and I've reset it and run the setup wizard from scratch on it. I have a Draytek VDSL model plugged into Port0 and have set up PPPOE authentication on the watchguard and the watchguard connects to the internet.  I have successfully downloaded the Live Security feature key and it's valid for 2 more months.  

The problem I have is that if I plug a laptop directly into Port 1 on the Watchguard and set up a static IP the laptop can see the internet. However if I plug Port 1 into an established 48 port switch nobody on the switch can see the Watchguard, and in fact the Port1 light on the Watchguard doesn't even light up (it lights up if you plug the Laptop into it)

As far as I am aware when you reset a Watchguard and run the setup Wozard it sets up enough default settings to get you a basic internet connection but I'm wondering if there is now some additional configuration needed to allow the internet connection to be shared.

Bit of further background, the Watchguard is replacing an existing Draytek VDSL Router which was the original Default Gateway so I have set up the Watchguard with the same IP address as the Draytek Router (and of course unplugged the Draytek)

Would really appreciate some suggestions on this.

Many thanks
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
atlas_shudderedSr. Network Engineer

Commented:
Two things to check -

First, confirm that the cable between the switch and the firewall is in fact a straight through and not a crossover.
Second, hard code the speed and duplex of both devices, then reconnect the firewall to the switch.

Author

Commented:
Hi,

I can confirm the cables are not crossover.  I'm not sure if the WatchGuard enables you to hard code the speed and duplex, the switch is not managed so no settings possible on that I'm afraid.  

Thanks
atlas_shudderedSr. Network Engineer

Commented:
That may be the undoing then.  The few times I've seen this behavior in the past it has been an mdix issue resolved by hard coding.

Author

Commented:
It's a standard 48 Port Gigabit unmanaged switch, could a standard switch really not be fundamentally compatible with a standard firewall?
Sr. Network Engineer
Commented:
It's not really a matter of incompatibility.  It has to do with how midx is behaving on the firewall interfaces.  This is not isolated to just the firewall, the problem is also common on other network equipment, carrier connections and servers.  It is often necessary to hard code the speed and duplex in order to get connectivity to come up.  The point that you raise of the PC being able to connect to both but not the switch and firewall to each other is a very strong indicator of this underlying problem.

Author

Commented:
OK thanks very much you've given me something to investigate.
atlas_shudderedSr. Network Engineer

Commented:
No worries.  Good luck

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial