topic Re: Connection issue with 2 PPPOE connect in Firewall and Security Management

Connection issue with 2 PPPOE connect

LM-Rafael — Sun, 12 May 2024 07:03:23 GMT

Hi everybody,

i have a strange issue with my new Check Point 3600. I have two Internet connections (PPPoE 1 and PPPoE 2).

Some sites run and some not at all.

Under attachments you will see an network diagram.

In particular, the page: duckduckgo.com does not work at all. A Ping to ip and DNS of duckduckgo.com is possible and working fine. But when i will open the page in my browser i get a "Connection was reset" error after some seconds.

Sometimes it takes a long time to access other websites.

The second Internet line is not so important for now. The setup will come later.

How can i solve this issue? I am asking for help

Thanks and BR

Rafael

Re: Connection issue with 2 PPPOE connect

Chris_Atkinson — Sun, 12 May 2024 10:05:08 GMT

Which version and JHF is the gateway and do you have mss clamping (sk61221) configured / enabled?

/Edit: Noted R81.20 JHF T53 per diagram.

Re: Connection issue with 2 PPPOE connect

LM-Rafael — Sun, 12 May 2024 11:32:31 GMT

Hi,

where can i set the mss clamping parameter? I have enabled under advanced settings (Stateful inspection)

Thanks

Rafael

Re: Connection issue with 2 PPPOE connect

Chris_Atkinson — Sun, 12 May 2024 15:25:09 GMT

The SK article referenced provides the relevant artefacts, if the problem persists please contact TAC for assistance.

Re: Connection issue with 2 PPPOE connect

the_rock — Sun, 12 May 2024 19:31:03 GMT

Ths sk Chris mentioned definitely has the info.

Best,

Andy

Re: Connection issue with 2 PPPOE connect

the_rock — Sun, 12 May 2024 19:32:35 GMT

You can also refer to this one as well.

Andy

https://support.checkpoint.com/results/sk/sk101219

Re: Connection issue with 2 PPPOE connect

LM-Rafael — Sun, 12 May 2024 21:36:10 GMT

Ok, When i set the MTU Size on my Windows Client, everything runs fine. But this is not a solution. What can i do now?

Re: Connection issue with 2 PPPOE connect

the_rock — Sun, 12 May 2024 21:38:05 GMT

Did you follow sk Chris and I mentioned? If no, please do and if yes and still not working, I would open TAC case and advise them of that.

Andy

Re: Connection issue with 2 PPPOE connect

LM-Rafael — Sun, 12 May 2024 21:56:35 GMT

Hi everybody,

the issue is solved, no. Thanks to @Chris_Atkinson and @the_rock .

I have set clamping right now and set the MTU size on Interface.

Thanks and BR

Rafael

Re: Connection issue with 2 PPPOE connect

the_rock — Sun, 12 May 2024 21:58:32 GMT

Great!

Re: Connection issue with 2 PPPOE connect

PhoneBoy — Mon, 13 May 2024 15:45:55 GMT

When I saw this post come in over the weekend, my initial thought was this was MTU-related.
Glad you sorted that out 🙂

Now, just a small warning about PPPoE interfaces: SecureXL will not accelerate traffic involving PPPoE interfaces (ingress or egress).
This could cause a performance issue down the road if the appliances were not spec'd with this in mind.
Note that this limitation does not apply on Quantum Spark appliances.