How to get pfSense WAN to accept VLAN 0

stephenw10

There's some discussion of v6 on the pfatt pages. May or may not be related. If it's just dhcpv6 I would expect it to be pulled over vlan0 like v4. So there's probably something else going on there.

Everything has to go through netgraph so I would expect a lot more CPU cycles to be required. There may be some tuning options it's not something I've ever looked into.
Try running top -aSH and see how the loading is spread across the CPU cores. Something might be single threaded now.

Steve

radwimp

@natbart just want to say thanks for figuring this out, it’s working great for me so far. just recently upgraded Fibe and my HH3000 would literally just freeze when maxing the connection out. Ecstatic that I can finally drop kick that POS and just have my pfsense box. Glad you didn’t give up and managed to figure it out. Great work.

jaredo

@natbart Here is another thank you for the hard work you did. I am posting this via my Frontier Fiber modem through a SG-3100 running your netgraph script. Appreciate all the help. Also a shoutout to @stephenw10 for lots of posts and replies before we figured out where my problem lay.

natbart

@jaredo - Your welcome. It was definitely a learning experience! Glad I could help others out, the same way the community helped me find this out.

Have you tried it with 2.5.x? I am still on 2.4.5-RELEASE-p1 (amd64) and worried to upgrade. Please let me know.

jaredo

@natbart said in How to get pfSense WAN to accept VLAN 0:

Have you tried it with 2.5.x? I am still on 2.4.5-RELEASE-p1 (amd64) and worried to upgrade. Please let me know.

I am using a SG-3100 at our office (the fiber location) so I am running 21.05.2-RELEASE (arm) which is 2.5.x on the community edition. Been running for the last week without any issues. I would say it is safe for you to update.

radwimp

@natbart also no issues here running the latest version here, using the community version 2.5.2.

c45p32

Don't upgrade to 2.6.0 or CE 22.01 it breaks the vlan0 script. The script runs without errors, and you can assign the correct interface to WAN, but it won't get an ip address from your ISP. Tried this on 2 routers and got the same result. Rolled back to 2.5.2 and everything works again. This is just a heads up to people wanting to use this script.

stephenw10

@c45p32 What NICs are you using?
This is almost certainly the same issue pfatt users are seeing.

Steve

c45p32

@stephenw10

Both routers use intel nics.

stephenw10

Assuming they are em or igb loading Intels driver will probably fix it as shown here:
https://github.com/MonkWho/pfatt/issues/67#issuecomment-1043358822

Not a permanent solution but would confirm the problem.

Steve

c45p32

@stephenw10

Oh... Thank You! One is em and the other is igb, so I will give this a try later night.

c45p32

Tested the driver and was still not able to get an IP address.

stephenw10

Would probably only work if it's igb carrying vlan 0 there. If it's em you'd need that instead.

Steve

c45p32

@stephenw10

Ok, I went ahead and went cowboy and upgraded my main router (igb) and it worked. I put the fix in then upgraded to 2.6.0 worked, went to CE, and still worked all the way from 2.5.2.

Do you have instructions on how to compile that driver for em? I tried and it couldn't find the kernel modules.

Thank you again for all your help!!

stephenw10

You might need to use the merged driver for that. Not something I've tried recently.

dayneparrott

I can’t seem to get pfsense to pull an IP via vlan0 using that netgate script, using 2.5.2 CE with a HP NC552SFP+ card, Nokia GPON transceiver provided by Bell MTS (Central Canada).

I’ve set the MAC address for the old router in pfsense on the wan interface and in the script, it links fine. Doesn’t pull an IP address, just says 0.0.0.0

dayneparrott

@stephenw10

c45p32

@dayneparrott

You need to set the mac address to your nic, and your interface example igb0. Make sure you reset your IP from your ISP. You also need to go into nic assignments and set your wan nic to ngeth0 after running the script.

dayneparrott

@c45p32 Ahhh, the nic not the HH3000 Mac, I see. I’ll try that later today. What version of pfsense are you running?

dayneparrott

@c45p32 Also, there’s no way for me to release the current dynamic assignment via the HH3000, it’s glitchy and the management page just infinitely loads.