Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    PfSense is unreachable after install

    Scheduled Pinned Locked Moved General pfSense Questions
    72 Posts 5 Posters 29.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mathomas3
      last edited by

      Hello all,

      I have been trying to get my new(to me) box up and running but has been unreachable. I intend to replace my older setup with this one. Basic setup is a USB modem to a single NIC which then attaches to the rest of my network. I have tried just about everything that I can think of to get it up and running but havent had any luck, here is what I have tried.
      Static LAN IP
      DHCP LAN IP(fails to pull an IP from the existing box)
      DHCP WAN IP(when assigning the WAN to NIC and still fails to pull an IP)
      Static LAN IP and connecting that to a HUB with single computer attached to it and DHCP server offering IPs, a laptop failed to pull an IP and when statically setting the IP on the laptop, it still fails to ping the router
      I have freshly installed the OS 3 times
      Reset configurations 5 times
      Checked BIOS settings
      I validated that the NIC works via booting up to mint and pulling up a webpage

      All of this is running on a lenovo ThinkCentre M93P Tiny Form Factor Business Desktop Computer, Intel Dual-Core i5-4570T Processor up to 3.60 GHz, 8GB RAM, 128GB SSD

      Im open to anything and everything you guys might suggest, this issue is throwing me for a loop

      NollipfSenseN 1 Reply Last reply Reply Quote 0
      • NollipfSenseN
        NollipfSense @mathomas3
        last edited by

        @mathomas3 That Lenovo hardware has one NIC, correct?

        pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
        pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

        M 1 Reply Last reply Reply Quote 0
        • M
          mathomas3 @NollipfSense
          last edited by

          @nollipfsense correct... only one nic... for the WAN I am using a usb modem

          NollipfSenseN 1 Reply Last reply Reply Quote 0
          • NollipfSenseN
            NollipfSense @mathomas3
            last edited by

            @mathomas3 If you have access to console, you could execute 11 - restart webconfigurator.

            pfSense+ 23.09 Lenovo Thinkcentre M93P SFF Quadcore i7 dual Raid-ZFS 128GB-SSD 32GB-RAM PCI-Intel i350-t4 NIC, -Intel QAT 8950.
            pfSense+ 23.09 VM-Proxmox, Dell Precision Xeon-W2155 Nvme 500GB-ZFS 128GB-RAM PCIe-Intel i350-t4, Intel QAT-8950, P-cloud.

            M 1 Reply Last reply Reply Quote 0
            • M
              mathomas3 @NollipfSense
              last edited by

              @nollipfsense I also tried that... but I will try again...

              Nothing... I am not able to ping to/from the new box

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                What is the on-board NIC on that?

                Can we see a screenshot of the console after you've configured it with WAN and LAN?

                M 1 Reply Last reply Reply Quote 0
                • M
                  mathomas3 @stephenw10
                  last edited by

                  @stephenw10 IMG_20230401_083827.jpg

                  M 1 Reply Last reply Reply Quote 0
                  • M
                    mathomas3 @mathomas3
                    last edited by

                    @mathomas3 192.168.1.1 is the existing router that is pingable from existing machines... ie the old router is still on the network... I am using a dummy USB router for this test build

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by stephenw10

                      Mmm, OK that looks fine.

                      The ping there shows no response not 'host is down' which implies it is responding to ARP.

                      The client at 192.168.1.1 may be blocking those ping requests.

                      You should be able to ping 192.168.1.2 from the client though. Assuming the client has the correct subnet configured.

                      M 1 Reply Last reply Reply Quote 0
                      • M
                        mathomas3 @stephenw10
                        last edited by

                        @stephenw10 included in this screenshot is a ping from my computer to both the old and new routers, and from the old router to the new... I did change the IP of the router to a .3(Found out that .2 is for smart switch)
                        fd243f50-b1a7-435e-bf6c-2c5c62795e3d-image.png

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Hmm, well host unreachable implies it isn't responding to ARP. So that's something low level like a bad cable or a bad port somewhere.

                          M 1 Reply Last reply Reply Quote 0
                          • M
                            mathomas3 @stephenw10
                            last edited by

                            @stephenw10 I was thinking this too that hardware might be an issue... that's why I loaded up Mint to validate everything and it worked fine...

                            Dont know what's going on

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @mathomas3
                              last edited by

                              @mathomas3 so pfsense ip is 192.168.1.3? and your router is 192.168.1.1.. If pfsense does not show an arp entry for 192.168.1.1 then no you would never be able to ping it..

                              How exactly are you access pfsense gui via your screenshot - and it can't even ping itself?

                              What IPs are what exactly? And where are you accessing the gui from?

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator
                                last edited by

                                I was assuming the old router is also pfSense.

                                M 1 Reply Last reply Reply Quote 0
                                • M
                                  mathomas3 @stephenw10
                                  last edited by

                                  @stephenw10 correct... my old router is PfSense... and the new one is just with newer hardware(none failing hardware)...

                                  the old hardware is 192.168.1.1 and the new hardware is currently at 192.168.1.13
                                  everything(except 192.168.1.3) can ping 192.168.1.1 but nothing can ping to/from 192.168.1.3

                                  IMG_20230401_201446.jpg

                                  How can I identify the NIC within the software... I can boot to Mint if needed... but the bios only provided a MAC address for the NIC atm...

                                  M stephenw10S 2 Replies Last reply Reply Quote 0
                                  • M
                                    mathomas3 @mathomas3
                                    last edited by

                                    @mathomas3 The whole reason for this change is that the USB modem falls offline after continues load... feels like the chipset is failing with the continued power draw of this modem...

                                    I am hoping that this new board can cope with the power draw of it...

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator @mathomas3
                                      last edited by

                                      @mathomas3 said in PfSense is unreachable after install:

                                      How can I identify the NIC within the software...

                                      Identify it how?

                                      At the console drop to the command line (option 8) and run:

                                      ifconfig -vm em0
                                      

                                      That will show you the MAC address and the link status. Unplug the NIC and re-run it. Make sure the link state has changed.

                                      M 1 Reply Last reply Reply Quote 0
                                      • M
                                        mathomas3 @stephenw10
                                        last edited by

                                        @stephenw10 I was able to get into the console and validated that media was connected and disconnected when I pulled the cable... just for grins I tried pinging google.com and it worked(dummy modem is still active strangely)

                                        after disconnecting the WAN connection I tried pinging google again and it failed

                                        Another thing that I tried (due to the managed switch that I have) I cleared all of the stats for this net router and tried to generate traffic by pinging from it and trying to access the web interface... this is what I got... Port 3 is what it's connected on
                                        151158f9-8df1-4d6c-90a9-4b00bbc55976-image.png
                                        If im reading that right... data is being sent To the router but nothing is coming back

                                        I also tried a different known good cat5 and im still getting the same results

                                        Nothing makes sense here
                                        2b4a8488-5048-4906-b662-d38a645ccb42-image.png

                                        M 1 Reply Last reply Reply Quote 0
                                        • M
                                          mathomas3 @mathomas3
                                          last edited by

                                          @mathomas3 Im going to have to rerun the Mint test... it could have been using the WAN port to access the net... to validate the NIC isnt damaged

                                          1 Reply Last reply Reply Quote 1
                                          • M
                                            mathomas3
                                            last edited by

                                            Ok... hardware and setup confirmed to be working... the only issue here is PfSense...
                                            I just booted into mint and confirmed that I was able to access the internet and also ping the current router...
                                            What could be the issue here everyone? hardware is confirmed to be working... I have installed pfsense a number of times and the basic setup of this system(which I have done a number of times) isnt working...
                                            8e96389d-7c95-4a31-b28b-c865713dd52f-image.png

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.