Andrew Pollack's Blog

Technology, Family, Entertainment, Politics, and Random Noise

Fixed my WAN connection failover problem tonight

By Andrew Pollack on 11/01/2011 at 09:36 PM EDT

For the last couple of weeks, my WAN connection here has been failing over from the Cable Modem to the backup DSL connection pretty frequently and the root cause has left me baffled.  Until tonight.

The failover is handled by my trusty old Sonicwall TZ-170 firewall.  It handles both the cable and dsl connections and can handle load balancing and failover.  For me, this combination makes sense since my public facing servers are all located at hosting centers so there's no need for a commercial network connection here. The total cost to have two different consumer grade connections isn't bad, and the reliability I get with the fail-over is worth it.


The problem has been that for the last couple of weeks, the faster cable connection has been periodically failing for no visible reason. Tests show me that the link is good, and if reboot the firewall it goes back to being happy...for a while. This configuration has been stable and reliable for a long time so it really had me scratching my head. It turns out that the answer was right there in the words "Trusty Old Sonicwall". The system had been reliable and stable, so I'd had no reason to look into updated firmware and it completely slipped my mind for the last several years.

You may remember that in 2007 we changed the date on which we switch the clocks for Daylight Savings Time. Well, I'd been lax in updating that trusty old Sonicwall and it was using the old dates. For the last few weeks, it's been off by one hour. When the system boots, it makes a brand new DHCP request and gets an address, then every few hours, it issues a DHCP "RENEW" transaction so that the address remains valid. When the DHCP RENEW transaction hit the provider's DHCP server, it had a timestamp that was off by an hour and was ignored. The firewall decided that since it couldn't renew its address, it had to invalidate that network port. Failover occurred.

I was able to test this theory by turning off the NTP (Network Time Protocol) settings and manually set the time on the firewall. Once I validated the fix, I went out and got an updated firmware for the TZ-170 and all is well.



  • car icon

    On Site Training

    We can bring the same kind of top quality training you get at conferences right to your offices. If your team needs training in a single topic, or you want to do a whole series on site, we can put a mini-conference together just for your team. For more information, Contact Me.
  • There are  - loading -  comments....



    Other Recent Stories...

    1. 02/09/2014Changing what I do at the Fire DepartmentSo, here’s a bit of a change. A couple of weeks ago I let the chief know that it was time for me to step down as the Lieutenant of our Engine 1. Once a replacement is chosen, I’ll still be a firefighter but won’t be an officer any longer. There are a number of reasons for this, but the best explanation I can give is that it is time to let someone else grow into that role and make their own contribution, while at the same time I’ve got plenty of other things going on that keep me from putting as much time ...... 
    2. 02/07/2014Dammit. I think I broke facebook. ...... 
    3. 02/06/2014Sochi Olympics Pub Chat - Now OpenAs in years past, I've created a group Skype chat room for anyone who wants to use it while watching the Olympics. We've had fun with this in the past, as long as nobody takes it too seriously. Here's a link: skype:?chat&blob=1-XgYKMLG_kK5fqEsq4t4Jd4GLxHZxbMIqSYtCRXS9DiF5WNjBtuljOtcSDqaGdkOv5mX6paJQSuNuI ** Don't expect much traffic in there until Friday's opening event ** A few recommendations: 1. Definitely use the skype command '/alertsoff' so when you're not watching you won't get bugged by the rest of ...... 
    4. 02/05/2014Question for mobile app developers - what development platform do you recommend? 
    5. 02/03/2014Are you using a Surface Pro 2 or another Windows 8.1 Tablet? Want to use Traveler on the touch screen? It works! 
    6. 02/03/2014Some thoughts from IBM Connect 2014 
    7. 01/28/2014Understanding the decision behind Connections Mail 
    8. 01/19/2014Snap Review - Microsoft Surface Pro 2 - Tablet, Laptop Replacement, or Both 
    9. 10/31/2013You Need to Wish Gab Davis a Happy Birthday Today 
    10. 10/14/2013To connect or not to connect 
    Click here for more articles.....


    pen icon Comment Entry
    Subject
    Your Name
    Homepage
    *Your Email
    * Your email address is required, but not displayed.
     
    Your thoughts....
     
    Remember Me  

    Please wait while your document is saved.