@Chrischevy , what pfsense packages did you install?

@stewart said in Gateway error on both WANs at same time: I guess that as long as it's working then you're all set. I don't know why changing those IPs made a difference and I wouldn't expect things to be moved back from WAN2 to WAN1. Maybe you have a reconnect period on the VPNs that's being hit and they reconnect over the new WAN1 connection? I don't know. Maybe an open connection keep the vpn on WAN2 and revert to WAN1 when there's no activity. Anyway, I'll look into this because I want to be sure that vpn connections come back to WAN1. Otherwise I have two solutions: implement the automatic failover of 4G router (but I have no control on it) implement some scripting to force the come back to WAN1 Thanks a lot

@viragomann I think this is what is happening. https://docs.netgate.com/pfsense/en/latest/troubleshooting/logs-arp-moved.html

@bingo600 Yes.

That makes sense. However, if I recall correctly this is happening not only for P2P. I'd understand that almost all ISP's have some kind of a traffic shaping for P2P traffic but this happens with usenet too which is very very rarely used here in the Philippines. They don't even know what it is. I haven't tried using a VPN but that would be a good test. But in my initial traffic monitor graph, does that point to throttling even though those dips are only for a few seconds that I don't even see the drop in speed in the actual download clients themselves?

Could be not sync'd yet, could be a rate limiting thing... If you capture the KOD packet - it should include a hint to why..

@bitspiel @lnguyen @Stewart Thank you all for the help, it has provided a path for me to travel along. The link is quite helpful and the presenter seems to use a pfSense box with a switch, so I was doing this wrong. I will try to use rules on the other lan OPT ports and see what comes of it. I'll update on my progress in the next few days.

Try looking at the ruleset in /tmp/rules.debug when it's failed. Then do a filter reload so it's working and check again. Compare the files, what changes? (if anything) Steve

@bingo600 okay, THAT is a useful tidbit, thank you, and thank you guys for the replies, I look forward to testing this out again then later today after I fix my mess of a problem I somehow introduced myself last night! once again, thank you guys for making this possible, all of you developers and everyone with the pfsense team, THANK YOU. love this software.

@bmeeks I had to undo it. Just got a call that for about the last hour or so calls have been going straight to voicemail intermittently. Looks like it broke the VOIP at the location.

@jknott said in NTP and automatic switch to DST ?: @ninthwave It changed for me, on both pfsense and computer behind it. Don't forget, NTP provides UTC and it's up to the client to provide the offset from it. On Linux, data is downloaded to provide the DST dates and I expect the same happens on FreeBSD. Strange because all my devices get their NTP time from my pfSense. And, while my Windows for instance, adjusted to DST, pfSense itself did not.

Your switches IP would all be in your infrastructure vlan.. be that your lan or some other vlan doesn't matter. But no I wouldn't put the management IP of your switches in different vlans. Doesn't really matter where your switches are - but it you have 2,3 or 103.. If you have a 24 port switch next to pfsense makes it easy.. Just use as many uplinks that you want from the switch to provide the bandwidth you need want, and how many interfaces your pfsense box has. This allows you to put any device anywhere, be it a downstream switch your core switch or an AP on any vlan you want. And lets you leverage your physical interfaces in pfsense for bandwidth - and not doing some stupid bridge in pfsense.. When you have a switch right there that can do that for you..

https://docs.netgate.com/pfsense/en/latest/highavailability/index.html has info on setting up automatic failover. However, states only transfer if the network cards are the same in both (igb0, etc.). In a CARP configuration router1 has a LAN IP (.2), router2 has a different LAN IP (.3), and they share a CARP LAN IP (.1). So the web GUI on the backup router would be accessed on its LAN IP. The not-automated way would be to keep the backup PC off, and upon failure or the primary, disconnect it, turn on the backup and restore the configuration. If you are plugged in to a newly installed backup router and can't get to the web GUI (using HTTPS?) then something's off...either try restarting the web processes from the console menu or just restart it. LAN can access the router on the LAN IP by default.

@jpozzoli said in SG-1100 random crash/reboots: @bmeeks They want me to collect the logs during a power failure/reboot. The problem is this is a random occurrence. I don't have a problem plugging the "serial" cable into something and letting it collect, but I don't know what should do the collection. If I did putty, I don't think the connection would survive the power loss on the SG-1100. Any suggestions? (I've also asked support the same thing, but would like to get non-Netgate options as well). The log on putty will capture everything. The terminal session does not close out if/when the device restarts.

@rod-it I've tried with finding a way to get the phone connection to work with pfSense but have had limited results. EasyTether has a FreeBSD driver that dc's constantly and does not reconnect and I have no idea on how to enable the laptop's built in wifi adapter. One of the comparisons of router/firewall software was that FreeBSD derived distros have horrible wifi support. At the moment I'm thinking of just setting the laptop up with a linux distro that I know how to configure and just do everything manually without a nice web interface (main reason I wanted to use pfSense). I don't have any experience with working with OSs that use FreeBSD and that seems to be where I am hitting the most road blocks.