[SOLVED] Errors In, but no Errors Out and No Collisions on both WAN

stephenw10

The MTU there is very low.

What changed here? Were those ever linked at 1G?

If you set a fixed speed it must match the other end of the link.
If you set half duplex you will always get collisions even if the other end does match.

Steve

Sergei_Shablovsky

@stephenw10 said in Errors In, but no Errors Out and No Collisions on both WAN:

The MTU there is very low.

We need this value for uplink, just ignore it.
Anyway, I make the test for both 100TX and 100TX full duplex, with MTU 1350, 1500 and 1420, and looks like MTU no such involved in this issue...

What changed here? Were those ever linked at 1G?

I try each settings for interface from automatic to highest 1000TX full duplex on Interfaces - WAN_X webpage of pfSense GUI, the result You able to see above...

Shortly to say, only on 100TX (mean 100TX half-duplex), all pfSense updates are ok, no connection reset by server due 1,5-2h connect time, all working.
But I still have In Errors.

stephenw10

With half duplex you mat well get errors, you will definitely see collisions.

Nothing is half-duplex these days not since hubs and 10base2! What is it connected to? It seems like something must be configured wrong.

Steve

Sergei_Shablovsky

@stephenw10 said in Errors In, but no Errors Out and No Collisions on both WAN:

With half duplex you mat well get errors, you will definitely see collisions.

Nothing is half-duplex these days not since hubs and 10base2!

Heh ;)

What is it connected to?

I start thinking “connected to a piece of sh****t” ;)
(Some Huawei applience)

It seems like something must be configured wrong.

Also make the same conclusion. But anyway before to start complaining the ISP, I need to be sure that all ok on my end of cable ;)
So, if You have some suggestions, I would be thankful to read it :)

Gertjan

@sergei_shablovsky
Put a switch between the ISP device, and pfSense.
First, hook up ,the switch to WAN-pfSense, and see that the connection negotiates a connection using 'auto on both side (the switch will only have the auto mode).

Then make the connection between the switch and the ISP device.

stephenw10

Yup, that would be a good test.

Sergei_Shablovsky

@gertjan said in Errors In, but no Errors Out and No Collisions on both WAN:

@sergei_shablovsky
Put a switch between the ISP device, and pfSense.
First, hook up ,the switch to WAN-pfSense, and see that the connection negotiates a connection using 'auto on both side (the switch will only have the auto mode).

Then make the connection between the switch and the ISP device.

Thank You, I'l try to doing this today. Really great idea, that I miss. (I little bit tied, may be need some sort of small vacation;)

jimp

For future reference you can find out more detail about the cause of these errors in most cases from sysctl. The amount of information varies by driver.

For example if you see errors on ix0, check sysctl dev.ix.0 and look at the counters, there are some which are obviously errors (marked with names that say error/err) and others that are less obvious like no_desc_avail. There will be counters under places like mac_stats as well as under various queues. Again, varying by driver.

All of these should total up to the number you see in the status page for errors, but it varies too much for the GUI to attempt displaying the detail.

Sergei_Shablovsky

@gertjan said in Errors In, but no Errors Out and No Collisions on both WAN:

@sergei_shablovsky
Put a switch between the ISP device, and pfSense.
First, hook up ,the switch to WAN-pfSense, and see that the connection negotiates a connection using 'auto on both side (the switch will only have the auto mode).

Then make the connection between the switch and the ISP device.

Thank You for all suggestions and help here!

So, the conclusion on testing: on a short (<30m) distance the NIC able to work on 1000Tx <full duplex> but on long distance (>80m) only 100TX <full duplex> possible + with a lot of “CRC In Errors”.

Sergei_Shablovsky

@jimp said in Errors In, but no Errors Out and No Collisions on both WAN:

For future reference you can find out more detail about the cause of these errors in most cases from sysctl. The amount of information varies by driver.

For example if you see errors on ix0, check sysctl dev.ix.0 and look at the counters, there are some which are obviously errors (marked with names that say error/err) and others that are less obvious like no_desc_avail. There will be counters under places like mac_stats as well as under various queues. Again, varying by driver.

Thanks You for suggestions and help here!

During testing various combinations NIC/cable/other appliance we see that “CRC In Errors” caused by impossibility of exact NIC to handle long (mean >80m) FTP Cat6e cable connection at 1000TX <full duplex> (1Gb/s).

All of these should total up to the number you see in the status page for errors, but it varies too much for the GUI to attempt displaying the detail.

Anyway the pfSense have a great GUI Dashboard.

Only one I need from pfSense Dashboard: dividing on groups (similar to Grafana with options to Expand/Collapse):
Section 1 - for frequently used info like WANs/LANs information, DNS info, VPNs info, netflow real-time graphics;
Section 2 - for more static, or rarely changing information (whole system info, installed packets, services status, RSS news, etc);

Sergei_Shablovsky

Issue was resolved by replacing FTP Cat6 connection to ISP's applience on fiber 4-mode cable: no any collisions, no any errors in sending/receiving packets and in addition delay was decreased from 7-8ms to 3-4ms.

mer

@sergei_shablovsky Amazing how often physical connectivity is the problem. Copper that works fine for 10M could have all kinds of problems at 10G. Fiber? Need to make sure everything matches.

Lesson to take away:
Check physical first :)

Sergei_Shablovsky

@mer said in [SOLVED] Errors In, but no Errors Out and No Collisions on both WAN:

@sergei_shablovsky Amazing how often physical connectivity is the problem. Copper that works fine for 10M could have all kinds of problems at 10G. Fiber? Need to make sure everything matches.

In exactly this case both the misconfiguration / changes in ISP work and length of cable impact.

Lesson to take away:
Check physical first :)

Need to re-read our “Resolving uplink physical connection problems” checklist ;)

mer

@sergei_shablovsky Another thing with copper cables that I've run into: cheap ones "seem" to work, but will cause problems. Especially at higher speeds and longer distances. The distance is part that everyone overlooks. Oh that 110m cat-4 should be fine, it worked before.

Glad that it was simple to correct.

Sergei_Shablovsky

@mer said in [SOLVED] Errors In, but no Errors Out and No Collisions on both WAN:

Another thing with copper cables that I've run into: cheap ones "seem" to work, but will cause problems. Especially at higher speeds and longer distances. The distance is part that everyone overlooks.

Thank You, I forgot to mention this.

Of course, our rules would be Using for copper link as much quality as available from local distributor.
Because You make cabling one time in 2-3-5-8 years, up to the next applience upgrade ;)

mer

@sergei_shablovsky said in [SOLVED] Errors In, but no Errors Out and No Collisions on both WAN:

Of course, our rules would be Using for copper link as much quality as available from local distributor.
Because You make cabling one time in 2-3-5-8 years, up to the next applience upgrade ;)

That is a very good rule. Even for your home network.