Balance 20: "WAN1 Disconnected (WAN Failed DNS test)" [RESOLVED]

[ABC-admin]

I was referring to PepLink’s NAT handling egress traffic LAN->WAN. Is there a limit on how many simultaneous NAT sessions PepLink can support?

Thanks

@TK_Liew

We do have OID for WAN Health Check State - .1.3.6.1.4.1.23695.2.1.2.1.4

Are you referring how many Port Forwarding rule can be defined? If so, we don’t cap on this.

[TK_Liew]

@ABC-admin

I was referring to PepLink’s NAT handling egress traffic LAN->WAN. Is there a limit on how many simultaneous NAT sessions PepLink can support?

Thanks

We support 7,500 concurrent sessions for Balance 20.

[ABC-admin]

Is there a way (via WebUI or SNMP) to check the concurrent session number in real-time?

[ABC-admin]

So here are the symptoms: Number of users in our office fluctuates during the weekdays. When max number of users are in the office and they send traffic during peak hours of the morning, PepLink drops connection on ATT Uverse SMB fake fiber line… fairly consistently.

Diagnosis: We have two ISPs: Comcast and ATT Fake Fiber (both 100/20 Mbps). Browsing ATT modem configuration, I came across NAT table page

… and fairly quickly I’ve realized correlation between NAT table entries (concurrent sessions) and PepLink ISP HealthCheck status

Now, using HTTPerf tool I can easily reproduce the problem by overwhelming ATT line with opening sessions and triggering PepLink HealtCheck failure. Per PepLink team recommendation (somewhere early in this tread), I changed network configuration and placed a managed switch between PepLink and ATT modem. Once HealthCheck was configured to ping the directly connected switch, HealthCheck kept ATT line up even when the link went completed saturated with my session flood.

In conclusion, ATT SMB Uverse modem has limit of 2000 NAT entries, and ATT support confirmed that this settings can not be altered or removed. So using Outgoing Rules we are managing to keep sessions lower over ATT link and routes bulk of them over Comcast.

It is not a solution, it is just a work around. I did run the session flood loader over Comcast, and to my surprise it triggered HealthCheck failure on both ISP: Comcast and ATT.

Your mileage may vary…

[TK_Liew]

@ABC-admin

Is there a way (via WebUI or SNMP) to check the concurrent session number in real-time?

The only way is downloading Diagnostic Report when the problem occurs. Tech support will help to check the concurrent session that captured in the Diagnostic Report.

@ABC-admin

So here are the symptoms: Number of users in our office fluctuates during the weekdays. When max number of users are in the office and they send traffic during peak hours of the morning, PepLink drops connection on ATT Uverse SMB fake fiber line… fairly consistently.

Diagnosis: We have two ISPs: Comcast and ATT Fake Fiber (both 100/20 Mbps). Browsing ATT modem configuration, I came across NAT table page

… and fairly quickly I’ve realized correlation between NAT table entries (concurrent sessions) and PepLink ISP HealthCheck status

Now, using HTTPerf tool I can easily reproduce the problem by overwhelming ATT line with opening sessions and triggering PepLink HealtCheck failure. Per PepLink team recommendation (somewhere early in this tread), I changed network configuration and placed a managed switch between PepLink and ATT modem. Once HealthCheck was configured to ping the directly connected switch, HealthCheck kept ATT line up even when the link went completed saturated with my session flood.

In conclusion, ATT SMB Uverse modem has limit of 2000 NAT entries, and ATT support confirmed that this settings can not be altered or removed. So using Outgoing Rules we are managing to keep sessions lower over ATT link and routes bulk of them over Comcast.

It is not a solution, it is just a work around. I did run the session flood loader over Comcast, and to my surprise it triggered HealthCheck failure on both ISP: Comcast and ATT.

Your mileage may vary…

Please do me favor below when problem occurs.

• Download Diagnostic Report.
• Provide screenshot of both WANs usage (Status > Real-Time).

Thank you.

[ABC-admin]

Here is a capture one of the occasions this morning

Where should I upload Diagnostic report?

Thanks

[TK_Liew]

@ABC-admin

Here is a capture one of the occasions this morning

Where should I upload Diagnostic report?

Thanks

Please open ticket to submit the screeshots and Diagnostic Report.

Thank you.

[TechZo]

Having the same issue on a balance 305 - ATT + Comcast
ATT disconnects.

Were you able to find a solution?
@ABC-admin
@TK_Liew

[TK_Liew]

@ABC-admin’s Balance 20 is overwhelmed. Suggested to upgrade the hardware. @TechZo, I would suggest getting help from your point of purchase to further isolate the problem. Normally, WAN failed health check is caused by the WAN connection where Balance router failed to contact the health check target.

[nn7686]

I have a similar issue, out of the blue my balance1350 8.1.1 build 5006 — will lose WAN 1 and WAN 2 health check, in In Control 2 , but I can ping the WAN1 port 100% - and it is 100% the correct port confirmed - this seems really odd. almost like after a over the air update it lost its mind - we have powered cycled everything and its still in disconnect sate but ping able - is there a way to remotely reconfig the 1350?