topic Re: Strangest 1590 UDP Port 47119 traffic issue in Spark Firewall (SMB)

Strangest 1590 UDP Port 47119 traffic issue

G_W_Albrecht — Sat, 05 Mar 2022 10:42:58 GMT

Customer has 1490 GWs as main site and remote firewalls connected by S2S VPN. He uses monitoring nodes at remote sites that every minute communicate using UDP Port 47119 with the main site. This works successfully.

Now for a new remote site, he deployed a 1590 R80.20.35 (992002613) GW instead of a 1490. S2S VPN works, but UDP Port 47119 traffic gets lost on its way to the main site. fw monitor for the source IP or fw ctl zdebug drop show nothing. Replacing the 1590 with a 1490 resolves the issue.

Re: Strangest 1590 UDP Port 47119 traffic issue

PhoneBoy — Sun, 06 Mar 2022 01:50:46 GMT

Guessing you already have a TAC case on this, right?

Re: Strangest 1590 UDP Port 47119 traffic issue

the_rock — Sun, 06 Mar 2022 03:31:39 GMT

Just an idea...what if you compare the config on both 1490 and 1590 to see if there are any differences for related port number?

Re: Strangest 1590 UDP Port 47119 traffic issue

G_W_Albrecht — Sun, 06 Mar 2022 10:14:47 GMT

Will be made monday - but i need a bit more information first...

Re: Strangest 1590 UDP Port 47119 traffic issue

G_W_Albrecht — Sun, 06 Mar 2022 10:15:33 GMT

Both have been configured in absolutely the same way...

Re: Strangest 1590 UDP Port 47119 traffic issue

the_rock — Sun, 06 Mar 2022 11:45:44 GMT

So if you filter only for that port in fw monitor, you still cant see anything?

Re: Strangest 1590 UDP Port 47119 traffic issue

G_W_Albrecht — Mon, 07 Mar 2022 08:00:26 GMT

Cause has been found over the weekend - an internal routing issue ! The device trying to send did that to a different MAC than the 1590, and so no traffic came thru...

Re: Strangest 1590 UDP Port 47119 traffic issue

the_rock — Mon, 07 Mar 2022 13:16:57 GMT

Thanks for letting us know!