Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    23.01 install results in no internet

    Scheduled Pinned Locked Moved General pfSense Questions
    69 Posts 8 Posters 22.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      It looks like you have 3 separate issues there.

      A php bug in Avahi.
      https://redmine.pfsense.org/issues/14019

      A CPU clock speed issue.
      Try running sysctl dev.cpu.0 check the reported clock speeds

      Some other problem preventing traffic after some time.
      You need to determine exactly what's failing there. No route? No DNS? Everything blokcked? Firewall completely unresponsive?

      Steve

      P 2 Replies Last reply Reply Quote 0
      • P
        puneet1984 @stephenw10
        last edited by

        @stephenw10 said in 23.01 install results in no internet:

        Some other problem preventing traffic after some time.
        You need to determine exactly what's failing there. No route? No DNS? Everything blokcked? Firewall completely unresponsive?

        Steve

        can you elaborate with what i need to check / commands to run?

        1 Reply Last reply Reply Quote 0
        • P
          puneet1984 @stephenw10
          last edited by puneet1984

          @stephenw10 said in 23.01 install results in no internet:

          It looks like you have 3 separate issues there.

          A php bug in Avahi.
          https://redmine.pfsense.org/issues/14019

          A CPU clock speed issue.
          Try running sysctl dev.cpu.0 check the reported clock speeds

          Some other problem preventing traffic after some time.
          You need to determine exactly what's failing there. No route? No DNS? Everything blokcked? Firewall completely unresponsive?

          Steve

          i am getting this on my 22.05

          dev.cpu.0.freq_levels: 800/51000
dev.cpu.0.freq: 800

          why is the CPU throttled??

          GUI shows

          Intel(R) Core(TM) i3-6100 CPU @ 3.70GHz
2 CPUs: 1 package(s) x 2 core(s)
AES-NI CPU Crypto: Yes (active)
QAT Crypto: No

          sysctl -a | grep -i cpu

kern.smp.cpus: 2
kern.smp.maxcpus: 256
CPU: Intel(R) Core(TM) i3-6100 CPU @ 3.70GHz (800.00-MHz K8-class CPU)
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
cpu0: <ACPI CPU> on acpi0
hwpstate_intel0: <Intel Speed Shift> on cpu0
hwpstate_intel1: <Intel Speed Shift> on cpu1
<118>Launching the init system...Updating CPU Microcode...
CPU: Intel(R) Core(TM) i3-6100 CPU @ 3.70GHz (792.00-MHz K8-class CPU)
coretemp0: <CPU On-Die Thermal Sensors> on cpu0
CPU: Intel(R) Core(TM) i3-6100 CPU @ 3.70GHz (792.04-MHz K8-class CPU)
FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs
cpu0: <ACPI CPU> on acpi0
est0: <Enhanced SpeedStep Frequency Control> on cpu0
<118>Launching the init system...Updating CPU Microcode...
CPU: Intel(R) Core(TM) i3-6100 CPU @ 3.70GHz (792.04-MHz K8-class CPU)
coretemp0: <CPU On-Die Thermal Sensors> on cpu0
kern.ccpu: 0
  <cpu count="2" mask="3,0,0,0">0, 1</cpu>
kern.sched.cpusetsize: 32
kern.pin_pcpu_swi: 0
kern.racct.pcpu_threshold: 1
cpu	HAMMER
device	cpufreq
kern.vt.splash_cpu_duration: 10
kern.vt.splash_cpu_style: 2
kern.vt.splash_ncpu: 0
kern.vt.splash_cpu: 0
vfs.ncpurgeminvnodes: 16
net.inet.tcp.per_cpu_timers: 0
debug.cpufreq.verbose: 0
debug.cpufreq.lowest: 0
debug.acpi.cpu_unordered: 0
kdb.enter.default=textdump set; capture on; show registers ; run lockinfo; show pcpu; bt; ps; alltrace; capture off; textdump dump; reset
hw.model: Intel(R) Core(TM) i3-6100 CPU @ 3.70GHz
hw.ncpu: 2
hw.acpi.cpu.cx_lowest: C1
          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Ah, Ok. It looks like the BIOS is incorrectly reporting the available CPU P-states to the OS. In 22.05 lower P-states are not used unless powerd is enabled in System > Advanced > Misc.
            In 23.01 Speed Shift is enabled by default for CPUs that support it. That should only use clock speeds the CPU actually supports but if it's limited in the BIOS it maybe.

            I suspect you're just not seeing it reported in 22.05 because powerd is not enabled.

            In 23.01 you can disable SpeedShift by setting hint.hwpstate_intel.0.disabled=1 as loader variable. But if the CPU can only use 800MHz it will still be running at that speed and just not reported.

            P 1 Reply Last reply Reply Quote 0
            • P
              puneet1984
              last edited by puneet1984

              Hello
              So i tried updating to 23.01 today again...
              but i am getting the same issue.... gateways works for sometime and then it disconnects.

              attaching

              1. upgrade log
              2. PPP log - both v22.05 and v23.01
              3. mpd5 status

              Logs

              ppp logs v22.05

              @stephenw10 Also i am unable to post using my backup ISP ... IP banned...
              I am using Jio ISP with IP subnet 49.43.x.x.
              Please check at your end

              B 1 Reply Last reply Reply Quote 0
              • P
                puneet1984 @stephenw10
                last edited by puneet1984

                @stephenw10
                @stephenw10

                regarding the CPU speed stuck @ 800Mhz.

                It is a Dell issue...
                i changed power supply of dell optiplex 3050 micro and bios is not recognising it so it is activating something called as BD PROTHOT which makes the cpu run at the lowest possible freq.
                Thus i want to know is there any way that can be disabled using a script in bsd.

                Please check this askubuntu-link and this link

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  The PPPoE link is going down because the remove side is closing it:

                  Mar 11 00:24:05	ppp	35096	[wan_link0] LCP: state change Opened --> Stopping
Mar 11 00:24:05	ppp	35096	[wan_link0] LCP: rec'd Terminate Request #243 (Opened)
Mar 11 00:17:03	ppp	35096	[wan] IFACE: Add description "WAN"
Mar 11 00:17:03	ppp	35096	[wan] IFACE: Rename interface ng0 to pppoe0

                  You might be able to manually change those MSRs using cpuctl.

                  P 1 Reply Last reply Reply Quote 0
                  • P
                    puneet1984 @stephenw10
                    last edited by

                    @stephenw10

                    yes the remote site is closing it...but why?? on 22.05 this is not happening.

                    what commands to put in for MSR and cpuctl?
                    i am a not technical person and not a engineer with coding skills.

                    stephenw10S 1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator @puneet1984
                      last edited by

                      @puneet1984 said in 23.01 install results in no internet:

                      what commands to put in for MSR and cpuctl?

                      I don't know, it's not something I've ever had to try. Those links you posted above seem to list the registers used by the throttling though.

                      1 Reply Last reply Reply Quote 0
                      • P
                        puneet1984
                        last edited by

                        @stephenw10

                        thanks for the help...
                        i am a not technical guy and trying to setup a home lab for my self as a hobby...
                        hope some one in the forum will know the know-how and might help..

                        Also regarding the WAN disconnection from the remote side do you have any idea why this is happening or what i can do more to diagnose the problem.
                        because the WAN is not working, i am unable to upgrade to 23.01 and thus i am not able to install any packages in 22.05...
                        i am really in a fix...dont know what to do next.
                        i am afraid that if i do a fresh clean install of 2.6 CE and then upgrade it to 23.01 the issue might persist and i will be wasting a whole lot of hours and gaining nothing.
                        i think netgate should not discontinue older versions and their package support atleast for like 3-4 months after releasing a new version, so that guys like me can alteast enjoy using the pfsense on older versions when newer versions do have unexplainable bugs.

                        also my IP still banned from the community...please ask the IT incharge to look into it.. netgate should not ban legitimate ISP ip range.

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          That IP range is in a subnet that's blocked because it's a source of mostly spam. I'm not sure we can exclude individual IPs within that.

                          You can continue to use 22.05 for some time. The pkg repos will remain available.

                          Steve

                          1 Reply Last reply Reply Quote 1
                          • B
                            bert64
                            last edited by

                            I'm having a similar issue with PPPOE after updating to 23.01, the link comes up and then mpd5 dies... The log seems to show that a second instance of mpd5 is being started, which sends a kill signal to the previous one and take over from it. This process then repeats indefinitely.

                            Mar 28 22:32:18 FW1 ppp[7408]: [opt5] IPCP: LayerUp
Mar 28 22:32:18 FW1 ppp[7408]: [opt5]   XXX -> XXX
Mar 28 22:32:20 FW1 ppp[66496]: Multi-link PPP daemon for FreeBSD
Mar 28 22:32:20 FW1 ppp[66496]:
Mar 28 22:32:20 FW1 ppp[66496]: process 66496 started, version 5.9
Mar 28 22:32:20 FW1 ppp[66496]: waiting for process 7408 to die...
Mar 28 22:32:20 FW1 ppp[7408]: caught fatal signal TERM
Mar 28 22:32:20 FW1 ppp[7408]: [opt5] IFACE: Close event
Mar 28 22:32:20 FW1 ppp[7408]: [opt5] IPCP: Close event```
                            1 Reply Last reply Reply Quote 0
                            • B
                              bert64 @puneet1984
                              last edited by

                              @puneet1984 Use IPv6 on Jio, less likely to be recycled address space or shared CGNAT space, so less likely to be on existing blacklists.

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by stephenw10

                                Is there anything in the main system log starting that?

                                It's not quite the same issue. OP's log here shows the terminate received via LCP and yours doesn't?

                                B 1 Reply Last reply Reply Quote 0
                                • B
                                  bert64 @stephenw10
                                  last edited by

                                  @stephenw10 Not that i've seen, i had to revert to 22.05 to get back online.. Is it possible to mount the alternative bootenv to retrieve the logs?

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Not dircetly that I'm aware of, you'd need to boot into it.

                                    B 1 Reply Last reply Reply Quote 0
                                    • B
                                      bert64 @stephenw10
                                      last edited by

                                      @stephenw10 what am i thinking.. i have a syslog server.
                                      It seems to spawn rc.newwanip for pppoe0, then 2 seconds later a new instance of mpd5 is spawned which kills the old one:

                                      Mar 28 22:32:55 FW1 charon[26243]: 11[KNL] x.x.x.x appeared on pppoe0
Mar 28 22:32:55 FW1 check_reload_status[388]: rc.newwanip starting pppoe0
Mar 28 22:32:56 FW1 dpinger[37838]: exiting on signal 15
Mar 28 22:32:56 FW1 dpinger[37566]: exiting on signal 15
Mar 28 22:32:56 FW1 check_reload_status[388]: Configuring interface opt5
Mar 28 22:32:57 FW1 dpinger[38249]: exiting on signal 15
Mar 28 22:32:57 FW1 dpinger[36458]: exiting on signal 15
Mar 28 22:32:57 FW1 dpinger[35464]: exiting on signal 15
Mar 28 22:32:57 FW1 dpinger[12865]: send_interval 500ms  loss_interval 2000ms  time_period 60000ms  report_interval 0ms  data_len 1  alert_interval 1000ms  latency_alarm 500ms  loss_alarm 20%  dest_addr fe80::a66c:2aff:fe77:3300%pppoe0  bind_addr fe80::ec4:7aff:fe19:898c%pppoe0  identifier "WAND_DHCP6 "
Mar 28 22:32:57 FW1 dpinger[13165]: send_interval 500ms  loss_interval 2000ms  time_period 60000ms  report_interval 0ms  data_len 1  alert_interval 1000ms  latency_alarm 500ms  loss_alarm 20%  dest_addr 2001:XXX::73  bind_addr 2001:XXX::240  identifier "RTFW "
Mar 28 22:32:57 FW1 dpinger[13674]: send_interval 500ms  loss_interval 2000ms  time_period 60000ms  report_interval 0ms  data_len 1  alert_interval 1000ms  latency_alarm 500ms  loss_alarm 20%  dest_addr 2001:XXX::6464  bind_addr 2001:XXX::240  identifier "Jool "
Mar 28 22:32:57 FW1 dpinger[14103]: send_interval 500ms  loss_interval 2000ms  time_period 60000ms  report_interval 0ms  data_len 1  alert_interval 1000ms  latency_alarm 500ms  loss_alarm 20%  dest_addr 2001:XXX::777  bind_addr 2001:XXX::240  identifier "CISCO_3750 "
Mar 28 22:32:57 FW1 dpinger[14579]: send_interval 500ms  loss_interval 2000ms  time_period 60000ms  report_interval 0ms  data_len 1  alert_interval 1000ms  latency_alarm 500ms  loss_alarm 20%  dest_addr 2001:XXX::100  bind_addr 2001:4d48:ad57:40a::240  identifier "LIABFW "
Mar 28 22:32:57 FW1 dhcp6c[40213]: Sending Information Request
Mar 28 22:32:57 FW1 dhcp6c[40213]: set client ID (len 10)
Mar 28 22:32:57 FW1 dhcp6c[40213]: set elapsed time (len 2)
Mar 28 22:32:57 FW1 dhcp6c[40213]: send information request to ff02::1:2%pppoe0
Mar 28 22:32:57 FW1 dhcp6c[40213]: reset a timer on pppoe0, state=INFOREQ, timeo=2, retrans=3617
Mar 28 22:32:57 FW1 charon[26243]: 16[KNL] XXX disappeared from pppoe0
Mar 28 22:32:57 FW1 ppp[20529]: Multi-link PPP daemon for FreeBSD
Mar 28 22:32:57 FW1 ppp[20529]:
Mar 28 22:32:57 FW1 ppp[20529]: process 20529 started, version 5.9
Mar 28 22:32:57 FW1 ppp[20529]: waiting for process 50355 to die...```
                                      1 Reply Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        Seems like a race condition. What's opt5? How is it configured?

                                        B 1 Reply Last reply Reply Quote 0
                                        • B
                                          bert64 @stephenw10
                                          last edited by

                                          @stephenw10 opt5 is the pppoe interface, config is a little convoluted...

                                          There is a wan interface (igb2) which is connected to a switch, there is a tagged vlan interface (igb2 vlan 80), then there is a carp vip on that interface with the ppp session bound to it for failover.
                                          Taking the backup firewall offline and binding pppoe directly to igb2.80 made no difference.

                                          ppp configuration is mostly default - username, password, null service name, mtu set to 1500 to use baby jumbo frames.

                                          Interface configured legacy ip using pppoe, and then dhcpv6 for ipv6 with a /56 prefix delegation set to "information only" as it's static and i don't need to dynamically apply it to other interfaces.

                                          1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Hmm, that should be OK. Though technically PPPoE is not supported in HA.

                                            How is igb2 configured? In that sort of setup I would want to see it only static or no IP.

                                            B 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.