Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
DZ_KB
Collaborator

Upgrade Gateway R77.30 to R80.20 with cpuse: Issue on server return packet

Hi @All,

I want to share an issue to see if anyone has ever encountered the same.

When I upgraded my r77.30 gateway to r80.20 (with CPUSE),  server packets return do not cross my firewall.

Here is a diagram which details the issue:

Client ------ eth1-GW-eth2 ------ Server

when I do a fw monitor on my gateway GW, I see icmp request from Client that enter on eth1 and go out eth2. But no icmp reply on eth2.

When I do a tcpdump on my gateway GW I see icmp request from Client that on eth1 and eth2. AND i see icmp reply on eth2.

When i do "fw ctl zdebug drop | grep IP_Client or IP_Server I don't see any drop packet.

(Same things for tcp packets)

Thanks for your lights.

 

Regards

 

0 Kudos
3 Replies
Kaspars_Zibarts
Employee Employee
Employee

Why did you go with R80.20 and not R80.30? As far as I've heard R80.20 was "not that great" release for gateways. Plus did you install latest take as part of your upgrade?

0 Kudos
DZ_KB
Collaborator

Hi @Kaspars_Zibarts ,

We have an internal team that has a lot of memory leak problems with r80.30 installed on gateways and apparently especially on VSX.

The latest take is installed on the R80.20 gateway.

Regards.

 

0 Kudos
Kaspars_Zibarts
Employee Employee
Employee

You would have to share a bit more info then - exactly how did you run your commands and what did you see. 

As for us, R80.30 on VSX has been stable, no issues at all

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events