Turns out Sonicwall has a problem here : When upgrading firmware in a PROvx to newer than 6.2.0.0, the new features, such as QoS, ULA, routing etc. uses so much memory, that the PROvx turns off various less significant processes (such as parts of the web interface) when it is under "heavy" load.
The OS just forgets to turn on these processes again, when load returns to "normal", making a reboot the only way to return the PROvx to normal state again. This, of course, probably means that the PROvx never will be able to support 1000 SA's with firmware newer than v.6.2.0.0 (mine has less than 200 SA's defined). Bottom line : replace the PROvx with a PRO300 which has more CPU power and 4 times the RAM of a PROvx. /jesper -----Original Message----- From: Jesper Bach Sent: 31. juli 2002 16:45 To: [EMAIL PROTECTED] Subject: [SonicWALL]- PROvx loosing all VPN info (and some more) Hi I have a PROvx running firmware 6.3.1.0. About 200 configured SA's, but nothing on the DMZ. Box is used for terminating private PC's to the corporate LAN, so not much traffic in the daytime - not in the nighttime either. Problem is, when loggin on to the web interface, the box has lost all VPN info, and you cannot create a new SA (screen is simply missing). Also you cannot do an import/export, but a techsup dump works nicely. The VPN seems to work nicely anyways, as online users does not get disconnected and started Sonicwall's also gets connected. A reboot of the box will restore all SA's and functionality to correct order. Happened 2 times on this box, and one time on the box before, which i switched out with the current one to rule out hardware. Logfile contains a lot of these entries : 2002/07/31 16:41:06.624 IKE Initiator: No response - remote party timeout or SA mis-match x.x.x.x, 500 y.y.y.y, 500 Where x.x.x.x is the PROvx WAN IP, and y.y.y.y is a various number of IP addresses representing the remote Sonicwall's. Any clues/suggestions to what may be wrong ? Kind regards Jesper Bach --- [This E-mail scanned for viruses by Declude/F-Prot AV] ================================= To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/ --- [This E-mail scanned for viruses by Declude/F-Prot AV] ==================================================================================================To unsubscribe, send email to [EMAIL PROTECTED] In the body of the email put the following: unsubscribe sonicwall your_name The archive of this list is at http://www.mail-archive.com/sonicwall%40peake.com/
