1500D's (HA pair) crashing every night for weeks. * Issue Identified - IPSec VPN Bug *

Forum|Forum|10 years ago
April 9, 2016
11 replies
12701 views

We are running the newest 5.4 code release on a pair of HA 1500D's. These units are crashing every night now. It's been happening for weeks. FortiNet support has absolutely no idea what is going on. This is becoming detrimental to our business.

Is this happening to anyone else? Does this FortiOS dump everything if the crash is due to a Kernel panic, or do we need to hook something up to the physical console port (a PC with console software?, if so what app would we use that could keep the console text redirection going for over 24 hours?, no time out issues?).

They crash to the point where they don't respond to anything and the power cables have to be pulled. These are brand new units.

5.4

Dave_Hall

New Member

Something like this I would hook up a console/rollover cable to the console port and putty into it. Keep the session open and log it over night or until the fgt crashes. Never recall having to need to keep the session open, but putty does have a keepalive feature.

Putty-keepalive.jpg

cpetryAuthor

New Member

Thanks, I figured that would do it. We are going to try turning traffic shaping off for now since the issues also started happening when we enabled that. If that doesn't correct it the next step is a PC/putty setup to log the system crash.

ede_pfau

SuperUser

hi,

from your post I assume this cluster is in production mode already. If I were in charge, I'd consider 2 things:

- first, and foremost, downgrade to v5.2.7 to reach a stable condition. Only if the whole operation would be hinged on some new v5.4 feature this would not be an option. At least you've got this option, and it's not a bad one.

- second, like with TS I'd remove one feature after the other to try to pinpoint the one which causes trouble. I would probably start with the HA setup and reduce it to standalone mode. At this moment the cluster doesn't seem to be of any help anyways.

Sign up

Login with SSO

Login to the community

Login with SSO