Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[bbl]

We have two DFL-800 units, one a primary and one a backup.  We use it for internet access in a small business, plus we have a number of port forwards set up for terminal servers, web servers, etc. on our LAN. 

We're trying to clone the settings from the primary to the backup so we can put the backup into production.  The primary unit is exhibiting a problem where it seems to become unresponsive at random times.  The symptom is that we lose access to the internet in the business.  If I try to connect to the unit via a web browser it times out.  The front panel lights are still on.  We then power cycle the unit and it starts working again.

We did a backup of the Configuration on the primary unit (not a System backup) and then restored it on the backup unit.  It looked like all the rules/IP configurations were present.  We then swapped out the units and put the backup in production.  It appeared to work as we could access the internet.

However, many of the port forwarding rules didn't seem to be working.  We couldn't access many of the servers on the LAN from the outside.  At least one server was accessible, but the other 6 I tested were not.  We then put the primary unit back in production and all the port forwards started working.

They are both on the same firmware version, 2.27.00.14-14088.

1. Are there any troubleshooting procedures for out primary unit related to it's problem above?
2. Can you backup the configuration of a unit and restore it to another unit to clone it?
3. Are there any other considerations when cloning a unit and swapping it like that?  Do we need to reboot switches on the LAN?  Do we need to reboot the servers?

Thank you,
Chris Vesper

[chechito]

you must check for the problem using ping, arp, and logs on firewall.

use the cli to do this check

Maybe a arp problem can be the cause because mac address change

[sergiomnt]

I only see two options:

1 - try to create rules to solve the problem.
2 - Reset and configure it from scratch.

Sérgio de Souza
sergio@masternet.com.br

[bbl]

We replaced the unit with a Sonicwall instead.

[chechito]

ouch haha 

when this kind of mysterious problems arise its recommended to take a config backup, and do a factory restore, then update firmware and load the backup, the labour takes 10 minutes and gives you a fresh and healthy firewall.

The performance improves and that mysterious problems disappear (mostly)