Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Australian NBN connection stops after random time

    Scheduled Pinned Locked Moved General pfSense Questions
    30 Posts 5 Posters 2.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bleve @bleve
      last edited by

      ifconfig reports :
      [2.6.0-RELEASE][carl@barry.aboc.net.au]/home/carl: ifconfig em0
      em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
      description: WAN
      options=81209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,VLAN_HWFILTER>
      ether 00:f1:f3:21:7b:ed
      inet6 fe80::2f1:f3ff:fe21:7bed%em0 prefixlen 64 scopeid 0x1
      inet 167.179.136.192 netmask 0xfffffc00 broadcast 167.179.139.255
      media: Ethernet autoselect (1000baseT <full-duplex>)
      status: active
      nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

      R 1 Reply Last reply Reply Quote 0
      • R
        rcoleman-netgate Netgate @bleve
        last edited by

        @bleve OK good, not Realtek.

        When it goes down what do you see at Status->Gateways?

        Ryan
        Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
        Requesting firmware for your Netgate device? https://go.netgate.com
        Switching: Mikrotik, Netgear, Extreme
        Wireless: Aruba, Ubiquiti

        B 1 Reply Last reply Reply Quote 0
        • B
          bleve @rcoleman-netgate
          last edited by

          @rcoleman-netgate yes, not realtek!
          I'll have to wait and try to catch it again. Unless it may have been logged?

          Is this relevant?

          Jan 17 17:15:35 dpinger 50348 send_interval 500ms loss_interval 2000ms time_period 60000ms report_interval 0ms data_len 1 alert_interval 1000ms latency_alarm 500ms loss_alarm 20% dest_addr 167.179.136.1 bind_addr 167.179.136.192 identifier "WAN_DHCP "
          Jan 17 17:15:36 dpinger 54506 send_interval 500ms loss_interval 2000ms time_period 60000ms report_interval 0ms data_len 1 alert_interval 1000ms latency_alarm 500ms loss_alarm 20% dest_addr 167.179.136.1 bind_addr 167.179.136.192 identifier "WAN_DHCP "

          There's also a pile of these :
          Jan 17 17:11:26 dpinger 54594 WAN_DHCP 167.179.136.1: sendto error: 64
          Jan 17 17:11:26 dpinger 54594 WAN_DHCP 167.179.136.1: sendto error: 64
          Jan 17 17:11:27 dpinger 54594 WAN_DHCP 167.179.136.1: sendto error: 65
          Jan 17 17:11:27 dpinger 54594 WAN_DHCP 167.179.136.1: sendto error: 65
          Jan 17 17:11:28 dpinger 54594 WAN_DHCP 167.179.136.1: sendto error: 65

          These happen before the last errors

          R 1 Reply Last reply Reply Quote 0
          • R
            rcoleman-netgate Netgate @bleve
            last edited by

            @bleve Yep, so what's your System->Routing setting for the Monitoring IP on your WAN set to?

            Ryan
            Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
            Requesting firmware for your Netgate device? https://go.netgate.com
            Switching: Mikrotik, Netgear, Extreme
            Wireless: Aruba, Ubiquiti

            B 1 Reply Last reply Reply Quote 0
            • B
              bleve @rcoleman-netgate
              last edited by

              @rcoleman-netgate

              WAN_DHCP 		WAN 	167.179.136.1 	167.179.136.1 	Interface WAN_DHCP Gateway 
              

              That's the next hop, confirmed by traceroute :

              [2.6.0-RELEASE][carl@barry.aboc.net.au]/home/carl: traceroute www.sun.com
              traceroute: Warning: www.sun.com has multiple addresses; using 23.214.90.91
              traceroute to e120265.dscx.akamaiedge.net (23.214.90.91), 64 hops max, 40 byte packets
              1 loop1671791360.bng.mel.aussiebb.net (167.179.136.1) 2.708 ms 3.123 ms 1.961 ms
              2 10.241.4.108 (10.241.4.108) 1.813 ms 1.851 ms 2.029 ms

              .
              .
              .

              R 1 Reply Last reply Reply Quote 0
              • R
                rcoleman-netgate Netgate @bleve
                last edited by

                @bleve So that's your upstream IP and that's the default action. But if you change it to a public IP that always replies (Google DNS, CloudFlare, any other like that which replies to a ping) you will likely stay online.

                This is from an email I sent to a TAC Professional customer earlier this evening regarding a request for a configuration review on this very issue:

                I recommend changing your Gateway Monitoring IP from {blank} to something that will respond to a ping always on the internet, typically a DNS server will fit this need. By not specifying this your upstream device is used and ISPs often treat a once-a-second ping as an attempted Denial-of-Service (DoS) attack and will block that ping from happening. It then results in the gateway being marked down, even though the ISP is still routing all the traffic and then you are down for 5-15 minutes depending on the ISP policies. I recommend setting this to either Google's or CloudFlare's DNS server IP.

                Ryan
                Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                Requesting firmware for your Netgate device? https://go.netgate.com
                Switching: Mikrotik, Netgear, Extreme
                Wireless: Aruba, Ubiquiti

                B 1 Reply Last reply Reply Quote 1
                • B
                  bleve @rcoleman-netgate
                  last edited by

                  @rcoleman-netgate So you're suggesting that my ISP is blocking the monitor, and then the DHCP fails? What about just getting rid of the monitor entirely? I see that's an option. Silly or not?

                  R 1 Reply Last reply Reply Quote 0
                  • R
                    rcoleman-netgate Netgate @bleve
                    last edited by

                    @bleve I would keep dpinger working and just set the IP to something not in the ISP purview. Easier than trying to guess if the internet is down because you don't have a monitor at all anymore.

                    Ryan
                    Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                    Requesting firmware for your Netgate device? https://go.netgate.com
                    Switching: Mikrotik, Netgear, Extreme
                    Wireless: Aruba, Ubiquiti

                    B 1 Reply Last reply Reply Quote 0
                    • B
                      bleve @rcoleman-netgate
                      last edited by

                      @rcoleman-netgate Thank you, I've set it to the poor much-hammered-on 8.8.8.8, will wait & see.

                      Thank you for your help!

                      Any idea for how I can get the temp sensor to behave? I don't believe it's 27.9 degrees all the time!

                      Carl

                      R stephenw10S 2 Replies Last reply Reply Quote 0
                      • R
                        rcoleman-netgate Netgate @bleve
                        last edited by

                        @bleve said in Australian NBN connection stops after random time:

                        I don't believe it's 27.9 degrees all the time!

                        That sounds kinda low, honestly. Could be reading the wrong detail. I can't comment on the third party hardware -- that's outside of the scope of my work.

                        Ryan
                        Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                        Requesting firmware for your Netgate device? https://go.netgate.com
                        Switching: Mikrotik, Netgear, Extreme
                        Wireless: Aruba, Ubiquiti

                        B 1 Reply Last reply Reply Quote 0
                        • B
                          bleve @rcoleman-netgate
                          last edited by

                          @rcoleman-netgate It's 100% wrong!
                          Under all this, is a FreeBSD 12.3 box, is it safe to install mbmon and see if it'll work?

                          R 1 Reply Last reply Reply Quote 0
                          • R
                            rcoleman-netgate Netgate @bleve
                            last edited by

                            @bleve We don't recommend side-loading software but if you want to there's nothing to stop you from it.

                            Ryan
                            Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                            Requesting firmware for your Netgate device? https://go.netgate.com
                            Switching: Mikrotik, Netgear, Extreme
                            Wireless: Aruba, Ubiquiti

                            B 1 Reply Last reply Reply Quote 0
                            • B
                              bleve @rcoleman-netgate
                              last edited by

                              @rcoleman-netgate I'll skip it, if it's not recommended.
                              Thank you again for your time.

                              1 Reply Last reply Reply Quote 0
                              • B
                                biggsy
                                last edited by

                                @bleve

                                I'm guessing but it looks like you're with Aussie Broadband - based on that gateway IP address.

                                What sort of NBN connection do you have? Just wondering what your "NBN modem/router" is.

                                I'm with Aussie on HFC. I haven't had gateway monitoring on for more than three years. You could just try turning it off and see what happens. ABB-allocated IP addresses are very "sticky".

                                B 1 Reply Last reply Reply Quote 0
                                • B
                                  bleve @biggsy
                                  last edited by

                                  @biggsy said in Australian NBN connection stops after random time:

                                  @bleve

                                  I'm guessing but it looks like you're with Aussie Broadband - based on that gateway IP address.

                                  Yes, FTTP, with a static IP and a /24 behind it. The IP address won't change. Does it still want some sort of monitoring? Yes. A ping every second? Probably more than it needs!

                                  B 1 Reply Last reply Reply Quote 0
                                  • B
                                    bleve @bleve
                                    last edited by

                                    @bleve so I've turned the ping interval down to 1 ping every 5000ms instead of 500ms. That should reduce the unnecessary pings too.

                                    1 Reply Last reply Reply Quote 0
                                    • B
                                      biggsy
                                      last edited by

                                      So you've got your pfSense box plugged directly into the NBN NTD?

                                      If you don't have any luck with the 5000ms pings, I seriously suggest that you try disabling monitoring. The reason I turned mine off was simply because of false alarms. Never worked out what triggered them but they were false.

                                      B 1 Reply Last reply Reply Quote 0
                                      • B
                                        bleve @biggsy
                                        last edited by

                                        @biggsy said in Australian NBN connection stops after random time:

                                        So you've got your pfSense box plugged directly into the NBN NTD?

                                        Yes
                                        I'm not sure how else you'd do it? Or why you'd do it any other way?

                                        If you don't have any luck with the 5000ms pings, I seriously suggest that you try disabling monitoring. The reason I turned mine off was simply because of false alarms. Never worked out what triggered them but they were false.

                                        I'm certainly considering it! Thank you

                                        B 1 Reply Last reply Reply Quote 0
                                        • B
                                          biggsy @bleve
                                          last edited by

                                          @bleve said :

                                          I'm not sure how else you'd do it? Or why you'd do it any other way?

                                          Only checking that you didn't have something else between the NTD and pfSense because you said something about the "NBN router/modem". All good.

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator @bleve
                                            last edited by

                                            @bleve said in Australian NBN connection stops after random time:

                                            Any idea for how I can get the temp sensor to behave? I don't believe it's 27.9 degrees all the time!

                                            Assuming it's an Intel CPU go to Sys > Adv > Misc and set the thermal sensors to Intel Core.
                                            That will give you the on-die CPU sensors data. You can add the thermal sensors widget to the dashboard to view them. And they will be logged in the Status > Monitoring graphs.
                                            Yes that 27.9°C value is almost certainly bogus. Likely an invalid ACPI sensor location the BIOS is passing.

                                            Since it's only the WAN that stops it's probably not an over temperature issue but 'almost too hot to touch' is worrrying.

                                            Steve

                                            B 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.