Yep, hence why most of our customers go the Ubiquiti route, because it's robust and still simple to use but it does help to utilise SSH which is obviously not required with Meraki.
Draytek router dropping traffic frequently
- Thread starter Ironic Namesake
- Start date
Yep, hence why most of our customers go the Ubiquiti route, because it's robust and still simple to use but it does help to utilise SSH which is obviously not required with Meraki.
If your IP range is not 192.168.254.* then this may be an issue. If it can't see it locally it may be trying to push traffic over your WAN. If it's UDP then there is a chance it'll be a constant flow saturating the bandwidth which could potentially cause drops and or lack of response to ping.
Ideally you'd have a rule already in your firewall stopping anything destined for RFC1918 (or 1980 I can never remember) addresses over your WAN interface to stop this but may be worth a try.
- Joined
- 18 Oct 2002
- Posts
- 7,052
- Location
- Kuala Lumpur, Malaysia
I'll have a look at this. 192.168.254.*** is a range Hikvision NVRs use only by default for the cameras connected to the PoE interfaces. I did run Wireshark for a while yesterday but didn't spot anything related to this traffic, will look into it further today.
The Cisco Meraki range I was considering - they even give you the free equipment (MX64) for taking part in their webinars which might be worth a look, I guess initially we could run this separately to make sure everything is running as it should (we have a couple of VLANs using internet access only so could run these through a second router temporarily). MX64 looks sufficient as there isn't a need for wireless (have separate APs for Wireless already)
You're right - this was indeed happening, blocked this now and see if anything changes.
By number of packets not much though - during a 30 minute period approximately 1k packets
Last edited:
- Joined
- 18 Oct 2002
- Posts
- 7,052
- Location
- Kuala Lumpur, Malaysia
Had some free time to look into this further - running packet capture didn't seem to bring out anything obvious, have sent Draytek some captures / logs to see if they can spot anything.
Pretty much ready to move to another vendor once we can afford a bit of downtime as we haven't come any closer to finding a solution
Pretty much ready to move to another vendor once we can afford a bit of downtime as we haven't come any closer to finding a solution
- Joined
- 18 Oct 2002
- Posts
- 7,052
- Location
- Kuala Lumpur, Malaysia
I'll have a look at those too - we wouldn't be able to change for at least a couple of weeks until we can get someone in over the weekend to avoid any downtime during the week.
I did run simultaneous wireshark captures on both the WAN and LAN interfaces - about all that's telling me is that it stops routing between the LAN and WAN but not the cause of it. I'm not too hopeful in the support guys finding the reason but we'll see.
- Joined
- 18 Oct 2002
- Posts
- 7,052
- Location
- Kuala Lumpur, Malaysia
The MTU on the LAN or WAN interface? What did you change it to?
I've been looking at other parts of the network as I was hoping to find an issue somewhere there which is causing it to hang - I did come across someone mentioning Sonos devices causing this with Draytek of which there's one on our network but I could recreate it.
Funnily enough it happened yesterday (after nearly everyone left the office, so with not much load) twice within a few minutes. After this our Draytek wireless AP went down and hasn't come back up since.
Will have a look today to see what happened there, if it's related. We've got a new Meraki AP arriving today so quite good timing
On the WAN side. The default of the 2860ac the default is 1500.
I think we settled on 1482, I also consulted the ISP and managed to escalate to someone who had an idea of what they were talking about!
- Joined
- 18 Oct 2002
- Posts
- 7,052
- Location
- Kuala Lumpur, Malaysia
The WAN is connected to another router (provided by ISP)
Anyway - it looks like the issue was possibly caused by a bad network cable
(Draytek WAN > provider router) - switched out early this morning and not a single downtime event as of yet.
Anyway - it looks like the issue was possibly caused by a bad network cable
(Draytek WAN > provider router) - switched out early this morning and not a single downtime event as of yet.
The WAN is connected to another router (provided by ISP)
Anyway - it looks like the issue was possibly caused by a bad network cable
Bingo!
- Joined
- 18 Oct 2002
- Posts
- 7,052
- Location
- Kuala Lumpur, Malaysia
Still not 100% now sure the cable was the only cause - we've had 1 day without a single disconnect but did have 1 yesterday, although it's far less than before.
We're moving part of the network to an Edgerouter now - some part only requires internet connection only so we're going to separate and see if the issue still continues.