Problems between iphone and dhcp?
-
Hello everybody,
I ask the experts for help. I have a setup with version 2.6 CE that manages 7 vlans isolated from each other by pfsense which is the gateway of the network.
One of these vlan manages the voice with approximately 200 devices including 130 iphone / SE, Pfsense releases the dhcp of this voice vlan.
When a change is made on the dhcp (even on another vlan) the iPhones lose connection to the pfsense gateway while the ping responds between the devices of the same voice vlan.
Computers, laptops, plc, lan voip, wifi voip and any other devices have no problems.
If I do not manually disable the wifi on the iPhone, the Iphones remain in this condition for about a minute and then return to the normal situation.Someone with some ideas?
-
@edpbettinelli said in Problems between iphone and dhcp?:
the iPhones lose connection to the pfsense gateway
How exactly does that present? How are you testing? Anything logged in the dhcp log?
Steve
-
@stephenw10 I don't see how even if dhcp was off how that could effect anything in real time..
Could it be the issue with high latency on filter reload of lots of rules? There is a redmine about that and patch available.. But does changing dhcp reload the firewall rules?
-
Yup, I thought that but it would affect all clients, not just iphones.
-
@stephenw10 maybe it is and he is just noticing it on the iphones.
-
@stephenw10 said in Problems between iphone and dhcp?:
How exactly does that present? How are you testing? Anything logged in the dhcp log?
it seems that the problem is related to the operations that reload dhcp and also dns resolver. With the company stopped, I try, for example, to reserve a dhcp with Apply and only wifi iphone systematically disappears. At the log level I don't see anything
-
@edpbettinelli said in Problems between iphone and dhcp?:
and only wifi iphone systematically disappears.
Disappears from where?
Are you seeing disconnections on the iphones?
-
@stephenw10 Sorry i meant iphones respond to ping with other devices in the same vlan but pfsense does not respond to ping for at least 1 minute\
-
@edpbettinelli said in Problems between iphone and dhcp?:
pfsense does not respond to ping for at least 1 minute
During that minute, does it respond to pings on other interfaces?
-
@edpbettinelli said in Problems between iphone and dhcp?:
but pfsense does not respond to ping
From the iphones or from other devices? Or both?
-
@steveits said in Problems between iphone and dhcp?:
During that minute, does it respond to pings on other interfaces?
yes, even non-iphone devices on the same vlan respond to pfsense ping
-
@edpbettinelli are you saying you can not ping an iphone by name when unbound is restarting - this would make sense.
Or are you saying iphone can not ping pfsense IP on the iphone vlan? By IP? By name?
If unbound is restarting - then yeah you could have issues with resolving anything by name.. But that should not effect ping by IP..
Registering dhcp leases in unbound has been problematic for quite some time, because any time a lease is redone or issued it forces a restart of unbound, etc.
-
@edpbettinelli said in Problems between iphone and dhcp?:
even non-iphone devices on the same vlan respond to pfsense ping
That makes me think it's more of a wireless+phone issue than a pfSense issue.
-
@johnpoz said in Problems between iphone and dhcp?:
are you saying you can not ping an iphone by name when unbound is restarting - this would make sense.
Or are you saying iphone can not ping pfsense IP on the iphone vlan? By IP? By name?
If unbound is restarting - then yeah you could have issues with resolving anything by name.. But that should not effect ping by IP..
Registering dhcp leases in unbound has been problematic for quite some time, because any time a lease is redone or issued it forces a restart of unbound, etc.the effect is that all apps are blocked, with an app on iphone i verified that ping using ip. other iphone or voip phones on the same vlan respond to ping, while if in that minute I try to ping pfsense no response.
-
@edpbettinelli ok I just started a ping to my iphone IP 192.168.2.198
I restarted dhcp, I even did a manual reload of all the firewall rules..
Not 1 ping dropped.
Ping statistics for 192.168.2.198: Packets: Sent = 124, Received = 124, Lost = 0 (0% loss), Approximate round trip times in milli-seconds: Minimum = 2ms, Maximum = 322ms, Average = 73ms Control-Cfrom a box on another vlan to the wifi vlan the iphone is on...
-
@johnpoz sorry I didn't understand, did you ping from iphone to your gateway or from pfsense to iphone?
I see the problem from iphone to pfsenseSorry for my english
-
So during the failure you are still able to ping pfSense from other devices?
If pfSense itself stops responding then it does sounds like know pf reload issue:
https://redmine.pfsense.org/issues/12827Steve
-
@stephenw10 I confirm that with all other devices except iphone pfsense does not lose a ping. it seems like some strange management of wifi by apple
-
@edpbettinelli ok on my iphone.. Pinging pfsense IP on that vlan.
Restart unbound, reload firewall filters, restarted dhcp, etc..
Not a ping lost
-
Mmm, there's really no reason the iphone should react at all to dhcpd restarting.
Can we see your test results so we know exactly what you're seeing?
Steve
