1 2 Previous Next 12 Replies Latest reply on Nov 6, 2013 9:12 AM by faciulula

    Network Outage and Static Routes


      Hi, occasionally some networks in our enterprise go down. We have noticed that when this happens, once the network is back up, it cannot get to the proxy. The workaround for this has been to add a static route from the affected IP to the web gateway, and then delete it. Once this is done, users in the network are able to access the Internet via the proxy again.

      Has anyone come across this or a similar issue before?

      Also, can anyone explain why adding a static route and deleting it is effective? Is it just a case of giving the proxy's networking a kick in the guts to get it running again on the affected network?

      Any insight would be much appreciated.

        • 1. Re: Network Outage and Static Routes

          Hi tancredi,

          Have you managed to resolve this issue? We are experiencing similar issues. Any assistance would be much appreciated.

          • 2. Re: Network Outage and Static Routes



            I have not heard about this behaviour before... I strongly recommend to file an SR with technical support, since this looks like there could be an issue we would like to replicate and fix.




            • 3. Re: Network Outage and Static Routes

              I have the same issue. Problem exists in local routing cache on MLOS2 system. Solution is following command executed under linux console: ip route flush cache


              I configured cron to exec this command on every 5 minutes becasue you newer know when any enterprise network will be down again


              Of course this is only temporary fix and McAfee Team should fix this issue


              Message was edited by: faciulula on 9/11/13 7:23:13 AM CDT
              • 4. Re: Network Outage and Static Routes
                Jon Scholten

                Based on the details of this thread alone, there is not enough details to know what the issue is, as a result we would not what what to "fix".


                We really do want to help you but we need more details. Can you please let us know the SRs you have opened on this?




                • 5. Re: Network Outage and Static Routes

                  Hi Jon,


                  Previously we had SR #3-3218195529 open. A feedback file was provided but no useful info was gleaned and because the issue hadn't re-occurred in a while the SR was closed on 3 Sept.

                  If it does re-occur, which is likely, we will take TCP dump, connection trace, and feedback file once issue has been resolved. We may also try the ip route flush cache command rather than adding a static route to see if it is effective.

                  • 6. Re: Network Outage and Static Routes
                    Jon Scholten

                    Hi Tancredi,


                    I looked over the case and you are correct, the feedback did not help in isolating the issue.


                    However, from the feedback you are running 7.3.0- it's a bit older now (about a year old). Just a note.


                    Also, the case seemed to note that this only seemed to affect "remote users". Is this true? Your original description seems to indicate that only "some networks" are impacted by this.


                    You also said that adding a new route seemed to fix the issue. Do you happen to know what the routing table looked like prior to you updating it or flushing the cache? (ip route show OR netstat -rn)


                    Getting a feedback in the problem state would contain information about the problem state (rather than collecting it after).


                    It also doesnt make sense that you would have routing issues, because the MWG is only using one interface, so it simply relies on its default gateway.


                    I would wonder if there is some sort of ICMP redirect in your network which is sent incorrectly. An ICMP redirect would typically be sent by the specified gateway if there is a more optimal route to the internet that should be taken.


                    For example:

                    # MWG =

                    # Default GW in MWG =

                    # GW for the Default GW=


           might send an ICMP redirect to MWG, informing it to use instead of itself (


                    But this doesnt make sense, because this only affects certain networks... the above issue would impact all networks none local to the MWG itself.


                    So to conclude, yes, please gather the requested data if it occus again. If it pops up again, please open a SR, and post the number here.


                    I will be out of the office until 9/25 (fyi).




                    • 7. Re: Network Outage and Static Routes



                      Today I had this routing issue, again. To know more about this I will start monitor route cache and this article may be helpful: http://vincent.bernat.im/en/blog/2011-ipv4-route-cache-linux.html Regarding to this article this may be a problem: "rt_cache_entries is the number of entries in the route cache. You   should compare it with net.ipv4.route.max_size and ensure that the cache is never full to avoid triggering the garbage collector too often.". After flushing routing table value rt_cache_entries is about 500-1200. I wonder how big is this when routing problem appers.


                      If anybody will observe this issue again please post result of following command (before you will run command ip route flush cache):

                      lnstat -s1 -i1 -c-1 -f rt_cache




                      • 8. Re: Network Outage and Static Routes

                        Hello again,


                        Yesterday I had observed this issue again and I have done some investigation. This happened when subnet was down for a while.


                        Routing on my proxy server looks below:

                        default via dev eth0

               via dev eth0

               via dev eth0

               via dev eth0


                        Yesterday I catched invalid routing:

               via dev eth0  src

                            cache <redirected>  ipid 0x869c rtt 47ms rttvar 62ms ssthresh 2 cwnd 4

                        As you can see routing is cached as "redirected" and goes default via dev eth0 but it should go as via dev eth0. So propper routing should be:

               via dev eth0  src

                            cache  ipid 0x866c rtt 55ms rttvar 57ms ssthresh 7 cwnd 7


                        Again solution for this is flush route table on linux.


                        I have write script to temporary fix this issue (see attachment of this post):

                        - put flush-routing.sh file in location /usr/local/sbin and give exec permissions

                        - put file mwg-custom in location /etc/cron.d/

                        And next restart crond service. In log file /var/log/flush-routing.log you will find some events when issue occurs again.


                        Hope it will help somebody Espessialy McAfee to better know and solve this problem.





                        Message was edited by: faciulula on 10/23/13 3:31:58 AM CDT
                        • 9. Re: Network Outage and Static Routes
                          Jon Scholten

                          Hi Karol,


                          Please open a ticket and let me know the SR #, this way we can communicate directly and post our results. Please include a feedback when you open the case. Do not post the feedback here.




                          1 2 Previous Next