Issue with SG-3100 and 22.01? [Solved]

stephenw10

I would also consider re-installing 22.01 clean and restoring your config to rule out any issues during the upgrade.

Steve

gherkin'd

My 3100 booted once (if I recall correctly) after the 22.01 update, back in Feb. Since then, I have been forced to set the unit aside. Update completed fine, but afterwards, I cannot access from serial nor Web page.
I've tried to hard reset - via the reset button with no changes. Yet the boot process seems to complete, since the LED panel-indicators seem to proceed in a valid sequence.
I cannot access by any means.
Is there factory services?
I've opened a TAC-Lite ticket and am just surfing around the forum until a reply is received.

stephenw10

You should be able to see the boot output from uboot at the serial console even if there is no OS installed so I would concentrate your efforts on getting that working. Once you can see the console it will probably be obvious what is preventing you connect to the webgui.
https://docs.netgate.com/pfsense/en/latest/solutions/sg-3100/connect-to-console.html

Steve

gherkin'd

@stephenw10 Appreciate the reply:
Closer inspection revealed th Serial connection to be only on the ;aptop side.
The 3100 has been successfully upgraded to the latest 22.01 and I left it unattended while packages were to be loaded, *even though WAN port reported 'no carrier' /'DHCP down'. *This is clearly isolated to the 3100 only as moving the WAN cabling to another outside facing device works perfectly.
But thinking that the DNS Resolver took some time to come up, it was believed that time is what would cure all.
This is not the case. After 3 hour elapse, Resolve is up but remains with no WAN port. And Gateway Monitoring Service will not start, remaining stopped.

Thoughts ? / Help !!!

FSC830

You have already opened a TAC ticket.
Ask for the recovery image, usually you will get a download link within 1 hour (during normal office hours).
Then you can install SG from scratch.

Regards

stephenw10

Do you see link LEDs on the WAN port?

What does Status > Interfaces show?

It should link and show UP if it's connected to anything unless it's disabled.

Steve

gherkin'd

I've always used recovery images for firmware upgrade and that was the case in the Feb time frame. I save the running config as a start, initiate a factory default load, run recovery and load the latest firmware, then restore the saved configuration. That process is the standard procedure since initial ownership.
As I said, I shelved the 3100 until a time when I could invest in the problem.
Status>Interfaces>WAN indicates
'no carrier' /'DHCP down'. And DHCP will not come up.
Activity light on the port is green/solid

stephenw10

@gherkin-d said in Issue with SG-3100 and 22.01?:

Activity light on the port is green/solid

Even with no cable attached? That would be a bad port if so.

Steve

gherkin'd

@stephenw10
Thats with Cabling !!
BTW, firmware upgrades via Recovery image includes the WAN cabling attached.

stephenw10

So the WAN port just shows the left LED solid green when you connect a cable to it? Yet it shows no link in the status?

What does ifconfig -vvvm mvneta2 show?

Is it possible WAN is configured to use on of the other ports?

Steve

gherkin'd

@stephenw10 !

ifconfig vvm mvneta0 ; below

ifconfig vvm mvneta0_1.jpg

SteveITS

@gherkin-d mvneta2 is the WAN port :) mvneta1 is LAN.

stephenw10

Yeah the default config assigned mvneta0 as OPT so that might be expected to show as no carrier.

FSC830

I did not install the SG-3100 from recovery image yet, just being curious if anything is logged at console.
I expect the next crash at May 1st or 2nd.
Up to now the SG crashes every 23/24 days.
A PC is connected to serial interface.

But anyhow, I have two more questions: as screenshot shows there is something creeping which decreases memory, any idea how to pinpoint this?

Second question: I noticed that when using this view I need to login again to pfSense after x hours (not sure about the exact value).
When in dashboard view I keep logged in for days!?
Seems that the duration for session depends to the view, is that correct?

Regards

stephenw10

Check what processes are using RAM in Diag > System Activity or run top -aSH at the CLI.

The dashboard has a number of active items on it that update periodically keeping the session open. On static pages the session times out after a while.

Steve

luckman212

other commands you can use to show top memory-consuming procs:

show top 10 memory consumers

# ps -Am -opid,pmem,pcpu,rss,vsz,args | sort -k4 -rn | awk 'NR == 1 { print "  PID %MEM  %CPU   RSS    VSZ COMMAND" } NR > 1 && NR < 12 { print $0 }'

If you want a continuously updating display

# while :; do clear; ps -Am -opid,pmem,pcpu,rss,vsz,args | sort -k4 -rn | awk 'NR == 1 { print "  PID %MEM  %CPU   RSS
  VSZ COMMAND" } NR > 1 && NR < 12 { print $0 }'; sleep 1; done

or use `top`

# top -o res

FSC830

This morning it happens again...
From one minute to the other, I was just noticing that accessing a web site was not possible any longer (404 - Not found).
Ping works to all addresses (i.e. 1.1.1.1, 8.8.8.8 or any other IP).
But ping to a name will not work, so DNS service was not doing.
After a few minutes WebGUI from SG-3100 was unreachable too.

After last issue I connected an old laptop at SG-3100 with serial connection, so I looked up for any console output and ... the laptop was in a deadlock as well!???
Very strange... need to reboot laptop and after looking up in Putty log I rebootet the SG-3100 by power cycling. There was nothing seen in log, nothing means really nothing since last reboot! Not a single character.
An existing VPN connection into company network was still working (until reboot of SG).
No idea what this is. Will use the replacement hardware during the next weekend.

Regards

stephenw10

Hmm, nothing appeared at the console at all?
At the very least you should have see webgui logins shown there. If nothing at all was shown it sounds like it was not logging.

Your description of the issue really 'feels' like a failing drive. That's exactly how it presents. Except that eMMC failures generally don't recover at power cycle.

If you have an m.2 sata SSD you could try that instead.

Steve

FSC830

Hi,

no M2.SSD yet, but I will get one in the next days.
And no, me too was surprised, I looked in the last weeks from time to time at serial console, nothing was shown there. Sometimes I just pressed the ENTER key to see, if I am still connected to console, it was, but nothing was recorded since startup.

Regards

stephenw10

Hmm, well try just logging into the webgui to check. That should be shown, for example:

*** Welcome to Netgate pfSense Plus 22.05-BETA (arm) on 3100 ***

 WAN (wan)       -> mvneta2    -> v4/DHCP4: 192.168.126.11/24
 LAN (lan)       -> mvneta1    -> v4: 192.168.18.1/24
 OPT1 (opt1)     -> mvneta0    -> v4/DHCP4: 192.168.21.10/24

 0) Logout (SSH only)                  9) pfTop
 1) Assign Interfaces                 10) Filter Logs
 2) Set interface(s) IP address       11) Restart webConfigurator
 3) Reset webConfigurator password    12) PHP shell + Netgate pfSense Plus tools
 4) Reset to factory defaults         13) Update from console
 5) Reboot system                     14) Disable Secure Shell (sshd)
 6) Halt system                       15) Restore recent configuration
 7) Ping host                         16) Restart PHP-FPM
 8) Shell

Enter an option: 
Message from syslogd@3100 at Jun  3 16:43:12 ...
php-fpm[656]: /index.php: Successful login for user 'admin' from: 172.21.16.5 (Local Database)

Steve

Issue with SG-3100 and 22.01? [Solved]

show top 10 memory consumers

If you want a continuously updating display

or use top

or use `top`