Sangfor NSF3001A Issue Connection with Broadband Provider

Hello guys,

I have an issue, we have sangfor with type NSF3001A and we use dual ISP (IP Public and Broadband)

so the problem here is, when we try connection to internet via IP Public the connection is smooth no issue but when we try connection use Broadband Provider the problem connection not smooth like ping to google.com etc no reply and nslookup to a few website not resolve, so I hope there here have same problem with me, thanks

I understand you're facing connection issues with your Sangfor device (type NSF3001A) when using the Broadband ISP compared to the Public IP ISP. This can be frustrating, but let's troubleshoot the problem together. Here are some steps you can take:

1. Verify Sangfor Configuration:

Check if Sangfor is configured correctly for dual ISP with Public IP and Broadband. This might involve settings for routing, default gateway, and health checks for each connection.
Consult your Sangfor documentation or contact their support for specific configuration steps related to dual ISP with different connection qualities.
2. Isolate the Issue:

Temporarily disable the Public IP connection and see if the Broadband connection works at all. This helps isolate if the issue is specific to the Broadband connection or a general Sangfor configuration problem.
If the Broadband connection works independently, compare the configuration settings for both Public IP and Broadband connections within Sangfor. Look for discrepancies that might be causing issues with the Broadband connection.
3. Check Network Connectivity:

Verify that the physical connection between Sangfor and your Broadband ISP is functioning properly. Try a different cable or port if possible.
Check the Broadband ISP's status. They might be experiencing outages or service disruptions affecting your connection.
4. Sangfor Logs and Support:

Review Sangfor logs for any errors or warnings related to the Broadband connection. These logs might provide clues about the issue.
If the troubleshooting steps above don't resolve the problem, consider contacting Sangfor support. They can provide more in-depth analysis and potential solutions specific to your Sangfor model and configuration.
Here are some additional points to consider:

Route Preference: Is there a specific route preference set for internet traffic? Ensure the Broadband connection isn't being prioritized if it's unreliable.
DNS Settings: Are the DNS settings configured correctly for the Broadband connection? Inaccurate DNS settings can cause name resolution issues (nslookup failures).
By following these steps and providing more details about your Sangfor configuration and error messages (if any), you should be able to identify the cause of the uneven connection quality and get your Broadband connection working smoothly.

Hi Torkishd,

Based on this issue, we have created a case ID Ticket#20240412860009, kindly reply our email and provide us with the details of the issue.

Thanks gusy and finally this is problem from backend and prinsipal and R&D still investigate what the actual from this problem. Thanks All for respond

There is a big difference in speed between public and broadband. Can you verify the speed of you broadband. All I can say is that it is a ISP problem

If one of your ISP connections—in this example, the broadband provider—isn't working properly but the other—the IP public connection—is operating without any problems, there could be a setup or routing issue unique to the broadband connection.

Can you show your confguration? Check if there were problem or outages on your area maybe this cause your issues.

Check your policy configuration if there were blockings. You can also used the active active features of NGAF so your internet connectivity is very smooth

That is a broadband right? so it means that it is a mobile internet connectivity. This explains why it is not smoot at all. It is a ISP problem. Better switch to a fiber plan or dsl.

Here are some potential causes and troubleshooting steps based on the information you've provided:

1. Sangfor Configuration:

    Routing: Double-check your Sangfor's routing configuration. Ensure that traffic directed to the Broadband Provider's gateway is routed correctly through the corresponding interface. Verify that static routes or dynamic routing protocols (if used) are set up accurately.
    Load Balancing: If load balancing is enabled, make sure it's configured correctly and doesn't prioritize the IP Public connection over the Broadband Provider. Consider temporarily disabling load balancing to isolate the issue.
    Firewall Rules: Check your firewall rules to ensure they don't block traffic destined for the internet via the Broadband Provider. Create separate rules for each internet connection if necessary.
    Policy-Based Routing: If policy-based routing is used, verify that it's not directing specific traffic types only to the IP Public connection.

2. Broadband Provider:

    Connectivity Issues: Contact your Broadband Provider to confirm there are no outages or service disruptions in your area. Check for any known issues with their network.
    DNS Settings: Ensure your Sangfor is using the correct DNS servers provided by your Broadband Provider. You may need to configure them manually in the Sangfor's settings.
    Security Restrictions: Some Broadband Providers might have security restrictions that could interfere with certain types of internet traffic. Inquire about their specific limitations and if they require any special configuration on your Sangfor device.

3. Network Hardware:

    Interface Status: Verify that the network interface connected to your Broadband Provider is up and running. Check for any error messages or logs related to the interface.
    Cable Connections: Ensure all cables connecting your Sangfor to the Broadband Provider's network are secure and functioning properly. Try replacing them if necessary.

4. Additional Troubleshooting:

    Logs and Debugging: Enable logging on your Sangfor device and capture detailed information about routing, firewall rules, and any errors related to the Broadband Provider connection. Analyze the logs to identify potential issues.
    Test in Isolation: Connect a computer directly to the Broadband Provider's modem or router, bypassing the Sangfor, to see if the internet connection works there. This helps isolate the problem to the Sangfor configuration.
    Consult Sangfor Documentation: Refer to the official Sangfor NSF3001A documentation for troubleshooting steps specific to your model and firmware version.

When you are experiencing connectivity issues with one of your ISP connections (in this case, the Broadband provider) while the other (IP Public) connection works smoothly, there may be a configuration or routing problem specific to the Broadband connection.

Check the routing configuration on the Sangfor firewall to ensure that traffic is being routed correctly through the Broadband connection. Make sure that the default route or specific routes are set up properly for the Broadband connection.

If NSlookup is not resolving certain websites when using the Broadband connection, check if the DNS settings are configured correctly for that connection. You can try using alternative DNS servers like Google DNS (8.8.8.8, 8.8.4.4) to see if it resolves the issue.