MX with IPoE Internet connection drops out

[JonathanDixon]

Hi All,

Some of our ISPs deliver services using IPoE (instead of PPPoE), it's similar to DHCP in its appearance to the CPE.  With the MX WAN side configured for DHCP the connection does come up and work for a while (hours to days) but then drops out for a period (tens of minutes to two hours) then comes back on its own.

This only seems to happen with the MX, a Cisco router in place of the MX works fine (as does a Netgear etc.)

I've had a couple of cases open on this but haven't yet found a solution (apart from another router in-between and double NAT).  I suspect it's something with DHCP negotiation - curious to know if anyone has had similar issues?

Thanks,

Jonathan

[NolanHerring]

Do you have any event logs from the MX during the time period of which it loses it IP address?
Are you getting an alert (email) that the appliance goes down when this happens?

[JonathanDixon]

Hi Nolan,

All the logs show is the site to site VPN connectivity issues, then Primary uplink status change uplink: 1, then some time later Primary uplink status change uplink: 0. I don't have e-mail alerts setup for this one but the Appliance Status / Uplink tab shows 100% packet loss on uplink 0 during the outage.

Here's a sample log showing an outage for a couple of hours:

Nov 17 10:29:03 Route connection change peer_type: l3_vpn, peer: E0:C8:8C:24:33:CB, connection_status: connected
Nov 17 10:29:03 Route connection change peer_type: l3_vpn, peer: E0:C8:8C:23:0B:4F, connection_status: connected
Nov 17 10:29:03 VPN tunnel connectivity change vpn_type: site-to-site, peer_contact: 4.5.6.7:47227, connectivity: true
Nov 17 10:29:03 Primary uplink status change uplink: 0
Nov 17 10:29:02 Non-Meraki / Client VPN negotiation msg: notification INVALID-COOKIE received in unencrypted informational exchange.
Nov 17 10:28:57 VPN tunnel connectivity change vpn_type: site-to-site, peer_contact: 8.7.6.5:53890, connectivity: true
Nov 17 10:28:52 Non-Meraki / Client VPN negotiation msg: notification INVALID-COOKIE received in unencrypted informational exchange.
Nov 17 10:28:50 VPN registry connectivity change vpn_type: site-to-site, connectivity: true

***MX has switched to backup link

Nov 17 09:12:05 Non-Meraki / Client VPN negotiation msg: initiate new phase 1 negotiation: 192.168.15.2[500]<=>19.20.21.22[500]
Nov 17 09:12:04 Route connection change peer_type: l3_vpn, peer: E0:C8:8C:24:33:CB, connection_status: connected
Nov 17 09:12:04 Primary uplink status change uplink: 1
...
Nov 17 09:08:42 Non-Meraki / Client VPN negotiation msg: initiate new phase 1 negotiation: 12.13.14.15[500]<=>19.20.21.22[500]
Nov 17 09:08:37 VPN registry connectivity change vpn_type: site-to-site, connectivity: false
Nov 17 09:08:18 VPN tunnel connectivity change vpn_type: site-to-site, peer_contact: 8.7.6.5:53890, connectivity: false
Nov 17 09:08:17 Route connection change peer_type: l3_vpn, peer: E0:C8:8C:23:0B:4F, connection_status: disconnected
Nov 17 09:08:13 VPN tunnel connectivity change vpn_type: site-to-site, peer_contact: 4.5.6.7:47227, connectivity: false


Regards,

Jonathan