1100 Interface states at power up

aleger

Hello,
We are using a Netgate 1100 pfSense+ for our installation.
I'm facing a problem with my setup :

┌─────────────────┐ ┌───────────┐ ┌───────────────┐
│ Network company ├-────┤ Pfsense ├───-─┤ Local network │
└─────────────────┘ └───────────┘ └───────────────┘

At power up my devices in local network connected to the pfsense are getting an IP address from the dhcp server running on the network company. It seems like at power up, the pfsense is acting like a switch for like 30seconds... After pfsense is initialized everything is working well.

Do you know what is happening at powerup ? Can I disable all interface while system si not correcly initialized ?

Thanks in advance.

stephenw10

Yes, in current versions the ports are disabled at power up in uboot to prevent that.

The values that do that are added automatically when uboot is updated at pfSense upgrade. However if your 1100 already has the current ubot version it may not have been added.

You can force uboot to be reflashed and update the envs like so:

[23.05.1-RELEASE][root@1100-3.stevew.lan]/root: /usr/local/share/u-boot/1100/u-boot-update.sh -f
=> U-Boot is already at the latest version.  Continuing with the installation...
=> Updating the Netgate 1100 U-boot
==> Reading current settings
==> Updating the U-boot image (this may take a few minutes)
64+0 records in
64+0 records out
4194304 bytes transferred in 54.141159 secs (77470 bytes/sec)
==> Updating settings
==> Restoring settings
writing u-boot env(1)... done

Once that has been done you will see the following at the console from uboot when it boots:

Model: Netgate 1100
Net:   eth0: neta@30000 [PRIME]
Read - switch port: 0x1, page: 0x0, reg: 0x0, val: 0xFFFF
Read - switch port: 0x2, page: 0x0, reg: 0x0, val: 0xFFFF
Switch Ports Disabled

The LAN and OPT ports are disabled until pfSense enables them again with the VLAN setup.

Steve

aleger

@stephenw10 Thank you very much, it works like a charm !
Maybe it would be great to add the uboot force update during the whole pfsense update ?
It's a bit confusing for a firewall to act like a switch at power up...