WAN connection dropping for a few seconds (10-20 times a day)

[#1]

Hi, We have a Fortigate-50b in a small office configured as a simple NAT router. 10 to 20 times a day the connection on the WAN side drops for a few seconds. In the event log I see these events coming up each time: 3/05/2011 6:09:16 information system 36870 interface-stat-change Link monitor: Interface wan1 was turned up 3/05/2011 6:09:15 information system 36870 interface-stat-change Link monitor: Interface wan1 was turned down I couldn' t find anything in the KB of Fortinet. Anyone? Thanks in advance... Vincent

[#2]

Hi there, u could try i set the interface speed manualy. for example. # conf sys int (interface)# edit internal (internal)# set speed 100full 100M full-duplex 100half 100M half-duplex 10full 10M full-duplex 10half 10M half-duplex Dave

[veechee]

Vincent, What is the WAN connection? PPPoE connections like to drop when they get saturated, which is especially easy to do upstream. I had frequent dropping at a satellite office and since I added a second DSL line to share the load, the dropping has disappeared pretty much completely. * It' s odd but I find satellite offices need the dual WAN functionality of FortiGate' s more often than a main office, since at the main office there is usually a bigger pipe with a SLA. * The IPSec links on these lines still drop more than I' d like, but there is a lot of distance so it' s high latency. The users don' t really notice though since there are two routes.

[discoveryit]

What Firmware are you running?

[#5]

@Discoverit Firmware: v4.0,build0192,091222 (MR1 Patch 2) @veechee Cable. WAN1 port is connected directly to our cable-modem. @Dave Problem is on the WAN side, not the internal...

[rwpatterson]

Dave showed an example. Use the same commands on the WANx port. The command # diag hardware deviceinfo nic wanx will show you if there are errors on the port.

[#7]

The diag hardware command gave zero errors. Speed is 100 full duplex at this moment. How should I set up speed? 10 full? Our broadband connection is (theoretically) 40M If I try half-duplex, aren' t we getting any troubles surfing/mail? Everything is coming in and going out at the same wan port...

[rwpatterson]

If you have zero errors, look elsewhere for issues. Try a firmware upgrade to the latest patch level. (patch 6)

[Kenundrum]

I had a similar problem with a cable connection for a while. The issue was not with the firewall but rather the cable modem. In our case it turned out there was too much signal going to the modem and it would periodically lose connection to the cable network and reboot itself. Periodic modem reboots could be caused by various problems, but it might be something to take a look at. We had a motorola surfboard and in the log files we noticed a critical error with a valid timestamp and then a message to the effect of " ethernet link up" but with a 1970 timestamp- that indicated that the modem had been rebooted. At one point we also had someone run to the wiring closet and look at the modem when we noticed a problem just to make sure the modem had in fact gone down. Anyway- the cable company was able to fix the issue once we explained what was happening.

[rwpatterson]

Nice tidbit, but a few seconds would hardly be a reboot. (I would think)