also:
192.168.168.60 |
1065 |
192.168.168.196 |
340 |
192.168.168.82 |
237 |
192.168.168.44 |
177 |
192.168.168.40 |
130 |
these are the sessions opened !!! 1065 there is NO virus on that client - its clean!!! It smells like firmware bug - not properly closing sessions and killing WAN (fiber) . I remember there was a bug in ASA 3 years ago doing same thing open sessions bug affecting ASA to kill WAN port. Well, warranty just expired a month ago so I cannot call support. Extending warranty does not make sense, but buying another balance one also is under question with full respect to peplink.
These people have a lots of tabs opened and it makes sense whats happening.
In ASA I could remote using cli and kill active sessions, here I dont know the trick and the only thing what I can do is restarting peplink and after that, all comes to normal. But doing that during business hours for a company which relies their business on internet connection is just so frustrating. I may consider another brand which may be a more stable. Since this is not cheap but in $500 there are some good choices.
I read that place in the rack it may be sensitive to some electric interference from other devices, so I place - relocated it on the top of the rack and zip tighted.
Please feel to be in my shoes. I look like an idiot in front of my boss. They upgraded link to fiber which costs almost $1000 for same problem as they had with regular bandwidth paying $280 and all points to peplink failing. We have WAN2 with some not perfect satelite backup, but using that is so painful since all goes down for minutes. We changed satellite to coax more stable and again same thing.
there are 40 devices and 100/100 speed so all is in proper requirements. I spend days installing prtg and syslog servers but for a sake I dont see anything wrong besides the message the WAN 1 goes down … The speed at the time of downtime or just before is about 40 - 50 MB so half of our bandwidth.
Any thoughts? And I know its not ISP issue.