Strangest 1590 UDP Port 47119 traffic issue

[G_W_Albrecht]

Customer has 1490 GWs as main site and remote firewalls connected by S2S VPN. He uses monitoring nodes at remote sites that every minute communicate using UDP Port 47119 with the main site. This works successfully.

Now for a new remote site, he deployed a 1590 R80.20.35 (992002613) GW instead of a 1490. S2S VPN works, but UDP Port 47119 traffic gets lost on its way to the main site. fw monitor for the source IP or fw ctl zdebug drop show nothing. Replacing the 1590 with a 1490 resolves the issue.

[PhoneBoy]

Guessing you already have a TAC case on this, right?

[G_W_Albrecht]

Will be made monday - but i need a bit more information first...

[the_rock]

Just an idea...what if you compare the config on both 1490 and 1590 to see if there are any differences for related port number?

[G_W_Albrecht]

Both have been configured in absolutely the same way...

[the_rock]

So if you filter only for that port in fw monitor, you still cant see anything?

[G_W_Albrecht · Accepted solution]

Cause has been found over the weekend - an internal routing issue ! The device trying to send did that to a different MAC than the 1590, and so no traffic came thru...

[the_rock]

Thanks for letting us know!