Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    No WAN IP after power outage

    Scheduled Pinned Locked Moved General pfSense Questions
    26 Posts 6 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bPsdTZpW @luddite
      last edited by bPsdTZpW

      @luddite said in No WAN IP after power outage:

      @bpsdtzpw oh, i think this might be it.

      Note: modem has internet IP but its lan range is 192.168.1.x

      So 192.168.1.x (.2 for wan) 192.168.0.x (lan) are in the same subnet but 192.168.1.x (wan) 192.168.2.x (lan) are not in the same subnet?

      Your modem probably is setup to use 192.168.1.1 with a subnet mask of 255.255.255.0. This collides with addresses handed out by your existing LAN DHCP server. You need to separate the spaces, and use a static route to reach the modem from a 192.168.2.x, subset 255.255.255.0 LAN. To add the static route, use system/routing/static routes, then add an entry with "destination network" = 192.168.1.1/32, "gateway" = whatever your WAN gateway is (yeah, the modem is on the WAN from the point of view of pfSense), and a nice description.

      Also remember to make your modem's admin page inaccessible from the internet at large, so as to minimize security issues.

      1 Reply Last reply Reply Quote 1
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        If those are all /24 subnets then you're probably OK.

        Please post the actual interface IPs and subnets as shown in Status > Interfaces.

        Steve

        ludditeL 1 Reply Last reply Reply Quote 0
        • ludditeL
          luddite @stephenw10
          last edited by luddite

          @stephenw10

          MODEM

          MAC Address: 
B0:A7:B9:01:92:26
IP Address: 
192.168.1.1
Subnet Mask: 
255.255.255.0
DHCP: On

          WAN Interface (wan, igb0)

          Status
up 
DHCP
up     Relinquish Lease
MAC Address
00:1a:8c:46:f4:24 
IPv4 Address
192.168.1.2 
Subnet mask IPv4
255.255.255.0 
Gateway IPv4
192.168.1.1

          LAN Interface (lan, igb1)

          Status
no carrier 
MAC Address
00:1a:8c:46:f4:25 
IPv4 Address
10.10.10.1 
Subnet mask IPv4
255.255.255.255 
Bridge (bridge0) <- MYSWITCH

          MYSWITCH Interface (opt7, bridge0)

          Status
up 
MAC Address
02:a9:e1:97:76:00 
IPv4 Address
192.168.0.1 
Subnet mask IPv4
255.255.255.0
          NollipfSenseN GertjanG 2 Replies Last reply Reply Quote 0
          • NollipfSenseN
            NollipfSense @luddite
            last edited by

            @luddite You modem is a PPPoE device?

            pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
            pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

            ludditeL 1 Reply Last reply Reply Quote 0
            • ludditeL
              luddite @NollipfSense
              last edited by

              @nollipfsense Yep. VDSL2 with dynamic DHCP from the ISP via ipoe - I can't change that.

              1 Reply Last reply Reply Quote 0
              • GertjanG
                Gertjan @luddite
                last edited by

                @luddite said in No WAN IP after power outage:

                LAN Interface (lan, igb1)
                10.10.10.1

                Keep in mind : the day you install pfBlockerNG-devel, you'll have a IP address conflict to deal with.

                No "help me" PM's please. Use the forum, the community will thank you.
                Edit : and where are the logs ??

                ludditeL 1 Reply Last reply Reply Quote 0
                • ludditeL
                  luddite @Gertjan
                  last edited by

                  @gertjan said in No WAN IP after power outage:

                  Keep in mind : the day you install pfBlockerNG-devel, you'll have a IP address conflict to deal with.

                  Thanks- I have pfBlockerNG obviously already :-)

                  Bob.DigB GertjanG ludditeL 3 Replies Last reply Reply Quote 0
                  • Bob.DigB
                    Bob.Dig LAYER 8 @luddite
                    last edited by

                    @luddite That is not what he has meant...

                    ludditeL 1 Reply Last reply Reply Quote 0
                    • GertjanG
                      Gertjan @luddite
                      last edited by

                      @luddite said in No WAN IP after power outage:

                      I have pfBlockerNG obviously already :-)

                      What IP addresses is used by the web server ??
                      The default is pfBlockerNG web server VIP is 10.10.10.1 ... your LAN also uses 10.10.10.1(/24).
                      You're good for some network fireworks.

                      No "help me" PM's please. Use the forum, the community will thank you.
                      Edit : and where are the logs ??

                      ludditeL 1 Reply Last reply Reply Quote 0
                      • ludditeL
                        luddite @Gertjan
                        last edited by

                        @gertjan pfBlocker changed that for me.

                        1 Reply Last reply Reply Quote 0
                        • ludditeL
                          luddite @luddite
                          last edited by

                          This post is deleted!
                          1 Reply Last reply Reply Quote 0
                          • ludditeL
                            luddite @Bob.Dig
                            last edited by

                            @bob-dig said in No WAN IP after power outage:

                            @luddite That is not what he has meant...

                            Ah - yes I see. Thanks for pointing that out. I have the non devel version installed and no plans to install the devel version.

                            @stephenw10 said in No WAN IP after power outage:

                            If those are all /24 subnets then you're probably OK.

                            Please post the actual interface IPs and subnets as shown in Status > Interfaces.

                            Steve

                            I found that the WAN was /32 and I changed that to /24

                            @bpsdtzpw said in No WAN IP after power outage:

                            @luddite said in No WAN IP after power outage:

                            @bpsdtzpw oh, i think this might be it.

                            Note: modem has internet IP but its lan range is 192.168.1.x

                            So 192.168.1.x (.2 for wan) 192.168.0.x (lan) are in the same subnet but 192.168.1.x (wan) 192.168.2.x (lan) are not in the same subnet?

                            Your modem probably is setup to use 192.168.1.1 with a subnet mask of 255.255.255.0. This collides with addresses handed out by your existing LAN DHCP server. You need to separate the spaces, and use a static route to reach the modem from a 192.168.2.x, subset 255.255.255.0 LAN. To add the static route, use system/routing/static routes, then add an entry with "destination network" = 192.168.1.1/32, "gateway" = whatever your WAN gateway is (yeah, the modem is on the WAN from the point of view of pfSense), and a nice description.

                            Also remember to make your modem's admin page inaccessible from the internet at large, so as to minimize security issues.

                            I think this did the trick. I made the WAN IP static and also added the WAN Gateway.

                            I pulled the plug on the modem and everything runs as per expected. I rebooted the router and it all worked expected. I Uplugged the phone line on the modem and it was all as expected. Amazing. Such a silly oversight that I never would have discovered a fix for without everyone's help.

                            Thank-you All!!!! Fingers crossed it doesnt have any unexpected side effects ;-)

                            B 1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              It looks like you may also be hitting this: https://redmine.pfsense.org/issues/11545
                              Because the address shown as the LAN is clearly actually the pfBlocker VIP, which is a /32.

                              That's probably not an issue on the LAN but worth watching out for.

                              Steve

                              ludditeL 1 Reply Last reply Reply Quote 1
                              • B
                                bPsdTZpW @luddite
                                last edited by

                                @luddite Sweet! Yeah, address conflicts can cause mysterious behaviors.

                                1 Reply Last reply Reply Quote 1
                                • ludditeL
                                  luddite @stephenw10
                                  last edited by

                                  @stephenw10 said in No WAN IP after power outage:

                                  It looks like you may also be hitting this: https://redmine.pfsense.org/issues/11545
                                  Because the address shown as the LAN is clearly actually the pfBlocker VIP, which is a /32.

                                  That's probably not an issue on the LAN but worth watching out for.

                                  Steve

                                  I followed this guide for the most part and after everything was running I installed pfBlockerNG and it force changed the LAN IP. I didnt touch it. Nothing broke so i thought it was normal and left it as per the forced change. Is that wrong?

                                  https://www.youtube.com/watch?v=bz45r_4BREw

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    It shouldn't change the interface IP and it probably didn't. If you hit that bug it will just show like that in the Status. If you run ifconfig at the command line you will find the LAN still using the same IP address and subnet you set with 10.10.10.1 as a VIP on that.

                                    Steve

                                    ludditeL 1 Reply Last reply Reply Quote 1
                                    • ludditeL
                                      luddite @stephenw10
                                      last edited by

                                      @stephenw10 ok- I will investigate after work. Thanks for the info.

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.