topic Re: Cloudgenix SDWAN ion1000 limitation in Prisma SD-WAN Discussions

Cloudgenix SDWAN ion1000 limitation

SureshM — Fri, 17 Jun 2022 13:37:28 GMT

Cloudgenix SDWAN ion1000 limitation has the following limitation .

1) NAT wont work at times

2) multiple dot1q in LAN interfaces .

DO anyone faced such issues ?

Re: Cloudgenix SDWAN ion1000 limitation

rgallagher — Tue, 21 Jun 2022 13:19:53 GMT

Hi Suresh, there are no known issues that I am aware of, but would need more info to assist:

1) Can you provide more info on what exactly is not working with your NAT?

2) The ION1000 does support dot1q on LAN interfaces, what is the issue you're facing?

Re: Cloudgenix SDWAN ion1000 limitation

SureshM — Wed, 29 Jun 2022 03:35:47 GMT

1)NAT issue

we have seen instances that the direct internet traffic for applications like zoom is not getting exiting from the appliance . On further troubleshooting , found the NAT translations are not happening . To fix the issue , the box need to rebooted .

2) Dot1q issue

WHen we configure more than 5 or 6 dot1q interfaces , many end host is loosing connection to the gateway . The Arp is not getting completed . So whenever we do a deployment , do limited to number of dot1q interfaces creating on the device

Re: Cloudgenix SDWAN ion1000 limitation

rgallagher — Wed, 29 Jun 2022 13:57:53 GMT

Suresh, what code are you running on the IONs? Neither of these are expected behaviors, if a code upgrade does not address them then please raise a support ticket and have them investigated.

Re: Cloudgenix SDWAN ion1000 limitation

SureshM — Thu, 10 Nov 2022 05:12:39 GMT

code :

5.6.1-b13

Re: Cloudgenix SDWAN ion1000 limitation

heaberlinm — Wed, 15 Mar 2023 13:04:04 GMT

@SureshM, I've seen many bugs over the past few years related to what you're mentioning for dot1q and we still deal with it currently. The problem usually occurs after a parent interface flap. But ultimately this results in one or more sub-interfaces not responding to traffic within it's own subnet. As you mentioned, you can see devices ARPing for the gateway but no response. It will not respond to anything, ICMP, DHCP requests, etc until you bounce the sub-interface. You can do this from the CLI or from the web portal.