Broadcasts on Quantum Edge VNF

[HolgerHartwig]

Hi,

we use a Quantum Edge VNF on a VMWare SD WAN Edge. Everything seems to work. However, the broadcasts no longer arrive at the IP Helper.

In the log we found this:
fwconn_ent_early_expiration: [now=1649416396] conn <dir 1, 0.0.0.0:68 -> 255.255.255.255:67 IPP 17> reached early expiration;
fwconn_ent_eligible_for_del : conn <dir 1, 0.0.0.0:68 -> 255.255.255.255:67 IPP 17> is eligible for deletion;

Does anyone have an explanation for this?

[Chris_Atkinson]

Hi - Is R80.20.35 used here or another/earlier version?

[HolgerHartwig]

Hi Chris,
we use R80.20.35 (992002577), we have also tried R80.20.15 but with the same problem.

[Chris_Atkinson]

To confirm is the DHCP traffic specifically allowed in your policy and which objects were used here?

[HolgerHartwig]

Hi Chris,

just checked with our customer: Yes, there is a matching rule for DHCP inbound and outbound. We also tried disabling the setting "Accept incoming traffic to DHCP and DNS services of gateways" but nothing changed.

As always the packets show as allowed but it is not working. After removing VNF it starts to work immediately.

[Chris_Atkinson]

Understood, with reference to the below do the rules look like those in sk104114 or something different?

If the problem persists there after please investigate further with assistance from TAC.

[HolgerHartwig · Accepted solution]

Good Morning Chris,

it turned out that there's a bug in VMWare's SD WAN Edge software.

Switching to an older version removes all problems.

VMWare is already working on it.

Thanks for your help!!!