Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
nabs_nabs
Contributor

Upgrade Gateway R77.30 to R80.20 with cpuse: Issue on server return packet

Hi @All,

I want to share an issue to see if anyone has ever encountered the same.

When I upgraded my r77.30 gateway to r80.20 (with CPUSE),  server packets return do not cross my firewall.

Here is a diagram which details the issue:

Client ------ eth1-GW-eth2 ------ Server

when I do a fw monitor on my gateway GW, I see icmp request from Client that enter on eth1 and go out eth2. But no icmp reply on eth2.

When I do a tcpdump on my gateway GW I see icmp request from Client that on eth1 and eth2. AND i see icmp reply on eth2.

When i do "fw ctl zdebug drop | grep IP_Client or IP_Server I don't see any drop packet.

(Same things for tcp packets)

Thanks for your lights.

 

Regards

 

0 Kudos
3 Replies
Kaspars_Zibarts
Authority
Authority

Why did you go with R80.20 and not R80.30? As far as I've heard R80.20 was "not that great" release for gateways. Plus did you install latest take as part of your upgrade?

0 Kudos
nabs_nabs
Contributor

Hi @Kaspars_Zibarts ,

We have an internal team that has a lot of memory leak problems with r80.30 installed on gateways and apparently especially on VSX.

The latest take is installed on the R80.20 gateway.

Regards.

 

0 Kudos
Kaspars_Zibarts
Authority
Authority

You would have to share a bit more info then - exactly how did you run your commands and what did you see. 

As for us, R80.30 on VSX has been stable, no issues at all

0 Kudos