Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense 2.7.0 stop working now and then

    Scheduled Pinned Locked Moved General pfSense Questions
    32 Posts 2 Posters 3.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      As far as I know media converters like that are only media converters. They have no switching. So the segment over which collisions might occur is between the pfSense NIC and whatever is at the remote end of the fibre. It may not be a problem. It's still unexpected though.

      Can you swap the WAN to a different NIC in pfSense?

      T 1 Reply Last reply Reply Quote 0
      • T
        tomasenskede @stephenw10
        last edited by tomasenskede

        @stephenw10 said in pfSense 2.7.0 stop working now and then:

        As far as I know media converters like that are only media converters. They have no switching. So the segment over which collisions might occur is between the pfSense NIC and whatever is at the remote end of the fibre. It may not be a problem. It's still unexpected though.

        Can you swap the WAN to a different NIC in pfSense?

        Certainly, but in that case, I'll receive a new MAC address that will require updating with the ISP... but I'm willing to give it a try if it's worth it.

        1c6b120b-5748-40a1-8ff0-0940c4fe5861-image.png

        Should I use a crossover cable between the media converter and the NIC of the pfSense? Currently, I am using a Cat 6 patch cable.

        My converter converts 10 Gbps SFP to 2.5 Gbps Ethernet… can the lower speed of the inbound traffic cause the collision we see?

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          You shouldn't need a cross-over cable. It shouldn't matter. Anything using 1G Ethernet or higher should be auto-MDI/X. If it did require it it would be failing completely.

          Is the media-converter actually linked at 10G on the fiber side? If it has to buffer the traffic between 10G and 2.5G it could be causing problems.

          You can spoof the MAC address on the WAN interface to match whatever the ISP has registered. I would definitely try swapping the WAN NICs though, however you achieve that.

          The actual amount of errors and collisions shown is pretty small. I wouldn't expect that alone to cause the WAN to stop passing traffic entirely.

          Steve

          T 1 Reply Last reply Reply Quote 0
          • T
            tomasenskede @stephenw10
            last edited by

            @stephenw10

            17c6aa26-f82a-4589-b0e1-4721c80b2e5b-image.png

            Only on incoming data:
            Collision: 0,5%
            Errors: 0,45%

            outgoing data is without error/collision...

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Is igc0 the same NIC?

              You can looks at the type of errors those are in the sysctl macstats: sysctl dev.igc.0

              T 1 Reply Last reply Reply Quote 0
              • T
                tomasenskede @stephenw10
                last edited by

                @stephenw10
                pfSense - Netgate Device ID: febe9d4d7e04acf75053

                *** Welcome to pfSense 2.7.0-RELEASE (amd64) on pfSense ***

                WAN (wan) -> igc0 -> v4/DHCP4: 158.174.25.147/26
                LAN (lan) -> igc1 -> v4: 192.168.1.1/24

                1. Logout (SSH only) 9) pfTop
                2. Assign Interfaces 10) Filter Logs
                3. Set interface(s) IP address 11) Restart webConfigurator
                4. Reset webConfigurator password 12) PHP shell + pfSense tools
                5. Reset to factory defaults 13) Update from console
                6. Reboot system 14) Disable Secure Shell (sshd)
                7. Halt system 15) Restore recent configuration
                8. Ping host 16) Restart PHP-FPM
                9. Shell

                Enter an option: 8

                [2.7.0-RELEASE][admin@pfSense.dmz.se]/root: sysctl dev.igc.0
                dev.igc.0.wake: 0
                dev.igc.0.interrupts.rx_desc_min_thresh: 0
                dev.igc.0.interrupts.asserts: 7607622
                dev.igc.0.mac_stats.tso_txd: 0
                dev.igc.0.mac_stats.tx_frames_1024_1522: 2502085
                dev.igc.0.mac_stats.tx_frames_512_1023: 554961
                dev.igc.0.mac_stats.tx_frames_256_511: 467355
                dev.igc.0.mac_stats.tx_frames_128_255: 505314
                dev.igc.0.mac_stats.tx_frames_65_127: 1137035
                dev.igc.0.mac_stats.tx_frames_64: 941462
                dev.igc.0.mac_stats.mcast_pkts_txd: 4
                dev.igc.0.mac_stats.bcast_pkts_txd: 6
                dev.igc.0.mac_stats.good_pkts_txd: 6108212
                dev.igc.0.mac_stats.total_pkts_txd: 6108212
                dev.igc.0.mac_stats.good_octets_txd: 4432696875
                dev.igc.0.mac_stats.good_octets_recvd: 11661212584
                dev.igc.0.mac_stats.rx_frames_1024_1522: 7380592
                dev.igc.0.mac_stats.rx_frames_512_1023: 755436
                dev.igc.0.mac_stats.rx_frames_256_511: 577979
                dev.igc.0.mac_stats.rx_frames_128_255: 473883
                dev.igc.0.mac_stats.rx_frames_65_127: 762285
                dev.igc.0.mac_stats.rx_frames_64: 802790
                dev.igc.0.mac_stats.mcast_pkts_recvd: 11816
                dev.igc.0.mac_stats.bcast_pkts_recvd: 285482
                dev.igc.0.mac_stats.good_pkts_recvd: 10752965
                dev.igc.0.mac_stats.total_pkts_recvd: 11196512
                dev.igc.0.mac_stats.xoff_txd: 0
                dev.igc.0.mac_stats.xoff_recvd: 0
                dev.igc.0.mac_stats.xon_txd: 0
                dev.igc.0.mac_stats.xon_recvd: 0
                dev.igc.0.mac_stats.alignment_errs: 0
                dev.igc.0.mac_stats.crc_errs: 52083
                dev.igc.0.mac_stats.recv_errs: 0
                dev.igc.0.mac_stats.recv_jabber: 175
                dev.igc.0.mac_stats.recv_oversize: 0
                dev.igc.0.mac_stats.recv_fragmented: 418
                dev.igc.0.mac_stats.recv_undersize: 0
                dev.igc.0.mac_stats.recv_no_buff: 0
                dev.igc.0.mac_stats.missed_packets: 0
                dev.igc.0.mac_stats.defer_count: 0
                dev.igc.0.mac_stats.sequence_errors: 0
                dev.igc.0.mac_stats.symbol_errors: 0
                dev.igc.0.mac_stats.collision_count: 52676
                dev.igc.0.mac_stats.late_coll: 0
                dev.igc.0.mac_stats.multiple_coll: 0
                dev.igc.0.mac_stats.single_coll: 0
                dev.igc.0.mac_stats.excess_coll: 0
                dev.igc.0.queue_rx_3.rx_irq: 0
                dev.igc.0.queue_rx_3.rxd_tail: 147
                dev.igc.0.queue_rx_3.rxd_head: 148
                dev.igc.0.queue_rx_2.rx_irq: 0
                dev.igc.0.queue_rx_2.rxd_tail: 47
                dev.igc.0.queue_rx_2.rxd_head: 48
                dev.igc.0.queue_rx_1.rx_irq: 0
                dev.igc.0.queue_rx_1.rxd_tail: 380
                dev.igc.0.queue_rx_1.rxd_head: 381
                dev.igc.0.queue_rx_0.rx_irq: 0
                dev.igc.0.queue_rx_0.rxd_tail: 388
                dev.igc.0.queue_rx_0.rxd_head: 389
                dev.igc.0.queue_tx_3.tx_irq: 0
                dev.igc.0.queue_tx_3.txd_tail: 319
                dev.igc.0.queue_tx_3.txd_head: 319
                dev.igc.0.queue_tx_2.tx_irq: 0
                dev.igc.0.queue_tx_2.txd_tail: 206
                dev.igc.0.queue_tx_2.txd_head: 206
                dev.igc.0.queue_tx_1.tx_irq: 0
                dev.igc.0.queue_tx_1.txd_tail: 192
                dev.igc.0.queue_tx_1.txd_head: 192
                dev.igc.0.queue_tx_0.tx_irq: 0
                dev.igc.0.queue_tx_0.txd_tail: 731
                dev.igc.0.queue_tx_0.txd_head: 731
                dev.igc.0.fc_low_water: 32752
                dev.igc.0.fc_high_water: 32768
                dev.igc.0.rx_control: 71335938
                dev.igc.0.device_control: 1075578433
                dev.igc.0.watchdog_timeouts: 0
                dev.igc.0.rx_overruns: 0
                dev.igc.0.link_irq: 2
                dev.igc.0.dropped: 0
                dev.igc.0.eee_control: 1
                dev.igc.0.itr: 488
                dev.igc.0.tx_abs_int_delay: 66
                dev.igc.0.rx_abs_int_delay: 66
                dev.igc.0.tx_int_delay: 66
                dev.igc.0.rx_int_delay: 0
                dev.igc.0.rs_dump: 0
                dev.igc.0.reg_dump: General Registers
                CTRL 401c0641
                STATUS 40780683
                CTRL_EXIT 10000040

                Interrupt Registers
                ICR 00000000

                RX Registers
                RCTL 04408002
                RDLEN 00004000
                RDH 00000185
                RDT 00000184
                RXDCTL 02040808
                RDBAL 058d8000
                RDBAH 00000000

                TX Registers
                TCTL a503f0fa
                TDBAL 0589a000
                TDBAH 00000000
                TDLEN 00004000
                TDH 000002db
                TDT 000002db
                TXDCTL 0201011f
                TDFH 00000000
                TDFT 00000000
                TDFHS 00000000
                TDFPC 00000000

                dev.igc.0.fc: 3
                dev.igc.0.debug: -1
                dev.igc.0.nvm: -1
                dev.igc.0.iflib.rxq3.rxq_fl0.buf_size: 2048
                dev.igc.0.iflib.rxq3.rxq_fl0.credits: 1023
                dev.igc.0.iflib.rxq3.rxq_fl0.cidx: 148
                dev.igc.0.iflib.rxq3.rxq_fl0.pidx: 147
                dev.igc.0.iflib.rxq3.cpu: 3
                dev.igc.0.iflib.rxq2.rxq_fl0.buf_size: 2048
                dev.igc.0.iflib.rxq2.rxq_fl0.credits: 1023
                dev.igc.0.iflib.rxq2.rxq_fl0.cidx: 48
                dev.igc.0.iflib.rxq2.rxq_fl0.pidx: 47
                dev.igc.0.iflib.rxq2.cpu: 2
                dev.igc.0.iflib.rxq1.rxq_fl0.buf_size: 2048
                dev.igc.0.iflib.rxq1.rxq_fl0.credits: 1023
                dev.igc.0.iflib.rxq1.rxq_fl0.cidx: 381
                dev.igc.0.iflib.rxq1.rxq_fl0.pidx: 380
                dev.igc.0.iflib.rxq1.cpu: 1
                dev.igc.0.iflib.rxq0.rxq_fl0.buf_size: 2048
                dev.igc.0.iflib.rxq0.rxq_fl0.credits: 1023
                dev.igc.0.iflib.rxq0.rxq_fl0.cidx: 389
                dev.igc.0.iflib.rxq0.rxq_fl0.pidx: 388
                dev.igc.0.iflib.rxq0.cpu: 0
                dev.igc.0.iflib.txq3.r_abdications: 0
                dev.igc.0.iflib.txq3.r_restarts: 0
                dev.igc.0.iflib.txq3.r_stalls: 0
                dev.igc.0.iflib.txq3.r_starts: 1379149
                dev.igc.0.iflib.txq3.r_drops: 0
                dev.igc.0.iflib.txq3.r_enqueues: 1379206
                dev.igc.0.iflib.txq3.ring_state: pidx_head: 0902 pidx_tail: 0902 cidx: 0902 state: IDLE
                dev.igc.0.iflib.txq3.txq_cleaned: 1387798
                dev.igc.0.iflib.txq3.txq_processed: 1387838
                dev.igc.0.iflib.txq3.txq_in_use: 41
                dev.igc.0.iflib.txq3.txq_cidx_processed: 318
                dev.igc.0.iflib.txq3.txq_cidx: 278
                dev.igc.0.iflib.txq3.txq_pidx: 319
                dev.igc.0.iflib.txq3.no_tx_dma_setup: 0
                dev.igc.0.iflib.txq3.txd_encap_efbig: 0
                dev.igc.0.iflib.txq3.tx_map_failed: 0
                dev.igc.0.iflib.txq3.no_desc_avail: 0
                dev.igc.0.iflib.txq3.mbuf_defrag_failed: 0
                dev.igc.0.iflib.txq3.m_pullups: 0
                dev.igc.0.iflib.txq3.mbuf_defrag: 0
                dev.igc.0.iflib.txq3.cpu: 3
                dev.igc.0.iflib.txq2.r_abdications: 0
                dev.igc.0.iflib.txq2.r_restarts: 0
                dev.igc.0.iflib.txq2.r_stalls: 0
                dev.igc.0.iflib.txq2.r_starts: 1369418
                dev.igc.0.iflib.txq2.r_drops: 0
                dev.igc.0.iflib.txq2.r_enqueues: 1370001
                dev.igc.0.iflib.txq2.ring_state: pidx_head: 1937 pidx_tail: 1937 cidx: 1937 state: IDLE
                dev.igc.0.iflib.txq2.txq_cleaned: 1378468
                dev.igc.0.iflib.txq2.txq_processed: 1378508
                dev.igc.0.iflib.txq2.txq_in_use: 42
                dev.igc.0.iflib.txq2.txq_cidx_processed: 204
                dev.igc.0.iflib.txq2.txq_cidx: 164
                dev.igc.0.iflib.txq2.txq_pidx: 206
                dev.igc.0.iflib.txq2.no_tx_dma_setup: 0
                dev.igc.0.iflib.txq2.txd_encap_efbig: 0
                dev.igc.0.iflib.txq2.tx_map_failed: 0
                dev.igc.0.iflib.txq2.no_desc_avail: 0
                dev.igc.0.iflib.txq2.mbuf_defrag_failed: 0
                dev.igc.0.iflib.txq2.m_pullups: 0
                dev.igc.0.iflib.txq2.mbuf_defrag: 0
                dev.igc.0.iflib.txq2.cpu: 2
                dev.igc.0.iflib.txq1.r_abdications: 0
                dev.igc.0.iflib.txq1.r_restarts: 0
                dev.igc.0.iflib.txq1.r_stalls: 0
                dev.igc.0.iflib.txq1.r_starts: 1982043
                dev.igc.0.iflib.txq1.r_drops: 0
                dev.igc.0.iflib.txq1.r_enqueues: 1983280
                dev.igc.0.iflib.txq1.ring_state: pidx_head: 0816 pidx_tail: 0816 cidx: 0816 state: IDLE
                dev.igc.0.iflib.txq1.txq_cleaned: 1989783
                dev.igc.0.iflib.txq1.txq_processed: 1989823
                dev.igc.0.iflib.txq1.txq_in_use: 41
                dev.igc.0.iflib.txq1.txq_cidx_processed: 191
                dev.igc.0.iflib.txq1.txq_cidx: 151
                dev.igc.0.iflib.txq1.txq_pidx: 192
                dev.igc.0.iflib.txq1.no_tx_dma_setup: 0
                dev.igc.0.iflib.txq1.txd_encap_efbig: 0
                dev.igc.0.iflib.txq1.tx_map_failed: 0
                dev.igc.0.iflib.txq1.no_desc_avail: 0
                dev.igc.0.iflib.txq1.mbuf_defrag_failed: 0
                dev.igc.0.iflib.txq1.m_pullups: 0
                dev.igc.0.iflib.txq1.mbuf_defrag: 0
                dev.igc.0.iflib.txq1.cpu: 1
                dev.igc.0.iflib.txq0.r_abdications: 0
                dev.igc.0.iflib.txq0.r_restarts: 0
                dev.igc.0.iflib.txq0.r_stalls: 0
                dev.igc.0.iflib.txq0.r_starts: 1377367
                dev.igc.0.iflib.txq0.r_drops: 0
                dev.igc.0.iflib.txq0.r_enqueues: 1377615
                dev.igc.0.iflib.txq0.ring_state: pidx_head: 1359 pidx_tail: 1359 cidx: 1359 state: IDLE
                dev.igc.0.iflib.txq0.txq_cleaned: 1387186
                dev.igc.0.iflib.txq0.txq_processed: 1387226
                dev.igc.0.iflib.txq0.txq_in_use: 41
                dev.igc.0.iflib.txq0.txq_cidx_processed: 730
                dev.igc.0.iflib.txq0.txq_cidx: 690
                dev.igc.0.iflib.txq0.txq_pidx: 731
                dev.igc.0.iflib.txq0.no_tx_dma_setup: 0
                dev.igc.0.iflib.txq0.txd_encap_efbig: 0
                dev.igc.0.iflib.txq0.tx_map_failed: 0
                dev.igc.0.iflib.txq0.no_desc_avail: 0
                dev.igc.0.iflib.txq0.mbuf_defrag_failed: 0
                dev.igc.0.iflib.txq0.m_pullups: 0
                dev.igc.0.iflib.txq0.mbuf_defrag: 0
                dev.igc.0.iflib.txq0.cpu: 0
                dev.igc.0.iflib.override_nrxds: 0
                dev.igc.0.iflib.override_ntxds: 0
                dev.igc.0.iflib.use_logical_cores: 0
                dev.igc.0.iflib.separate_txrx: 0
                dev.igc.0.iflib.core_offset: 0
                dev.igc.0.iflib.tx_abdicate: 0
                dev.igc.0.iflib.rx_budget: 0
                dev.igc.0.iflib.disable_msix: 0
                dev.igc.0.iflib.override_qs_enable: 0
                dev.igc.0.iflib.override_nrxqs: 0
                dev.igc.0.iflib.override_ntxqs: 0
                dev.igc.0.iflib.driver_version: 1
                dev.igc.0.%parent: pci1
                dev.igc.0.%pnpinfo: vendor=0x8086 device=0x15f3 subvendor=0x8086 subdevice=0x0000 class=0x020000
                dev.igc.0.%location: slot=0 function=0 dbsf=pci0:1:0:0 handle=_SB_.PCI0.RP03.PXSX
                dev.igc.0.%driver: igc
                dev.igc.0.%desc: Intel(R) Ethernet Controller I225-V
                [2.7.0-RELEASE][admin@pfSense.dmz.se]/root:

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  So it looks like CRC errors:

                  dev.igc.0.mac_stats.crc_errs: 52083
                  dev.igc.0.mac_stats.recv_errs: 0
                  dev.igc.0.mac_stats.recv_jabber: 175
                  dev.igc.0.mac_stats.recv_oversize: 0
                  dev.igc.0.mac_stats.recv_fragmented: 418
                  dev.igc.0.mac_stats.recv_undersize: 0
                  dev.igc.0.mac_stats.recv_no_buff: 0
                  dev.igc.0.mac_stats.missed_packets: 0
                  dev.igc.0.mac_stats.defer_count: 0
                  dev.igc.0.mac_stats.sequence_errors: 0
                  dev.igc.0.mac_stats.symbol_errors: 0
                  dev.igc.0.mac_stats.collision_count: 52676
                  

                  Try disabling checksum hardware offloading in System > Advanced > Networking. You will need to reboot to apply that.

                  T 1 Reply Last reply Reply Quote 0
                  • T
                    tomasenskede @stephenw10
                    last edited by

                    @stephenw10

                    31281546-504b-4974-a40c-713baf6964a4-image.png

                    9cfd24e8-c480-43bd-82e0-e1c26feb6a54-image.png

                    544beb04-d891-460b-8d86-aa93a2c9624a-image.png

                    T 1 Reply Last reply Reply Quote 0
                    • T
                      tomasenskede @tomasenskede
                      last edited by tomasenskede

                      @tomasenskede

                      21f7207a-5a42-4f16-a877-fa1c6412633f-image.png

                      Looks promising!

                      95154a53-86de-4c24-8194-2f061df828f2-image.png

                      no...

                      783fd160-e7f5-4e90-9bb2-8b09e6e281be-image.png

                      still errors and collisions... should I enable h/w CRC again?

                      My current settings;
                      5069c456-86c5-44df-91d7-3c0dabf23782-image.png

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Since it made no difference it likely doesn't matter. I would try swapping the NICs next. If it follows that then it's probably real incoming errors. I'd probably look at swapping out the media converter in that case though that might not be practical.

                        However I still don't think those errors/collisions would cause the traffic to stop entirely. At most those are symptoms of some other failure.

                        T 1 Reply Last reply Reply Quote 0
                        • T
                          tomasenskede @stephenw10
                          last edited by tomasenskede

                          @stephenw10 said in pfSense 2.7.0 stop working now and then:

                          Since it made no difference it likely doesn't matter. I would try swapping the NICs next. If it follows that then it's probably real incoming errors. I'd probably look at swapping out the media converter in that case though that might not be practical.

                          However I still don't think those errors/collisions would cause the traffic to stop entirely. At most those are symptoms of some other failure.

                          I have contacted Digitus and asked them about issue, let see if they have to say about it.

                          1 Reply Last reply Reply Quote 0
                          • T
                            tomasenskede
                            last edited by

                            33c40399-8a6d-4435-9f94-81ba0aff1940-image.png

                            Now I have a 2.5 Gbps switch on the LAN side, and there are no errors reported on that side. Therefore, the issue must be on the WAN side, and it appears to be related to the Digitus media converter, the only device connected in that segment. :(

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Looks like you're still using the same NIC for the WAN though. I would try swapping the NIC assignments to be sure it's not a bad NIC.

                              T 1 Reply Last reply Reply Quote 0
                              • T
                                tomasenskede @stephenw10
                                last edited by

                                @stephenw10 said in pfSense 2.7.0 stop working now and then:

                                Looks like you're still using the same NIC for the WAN though. I would try swapping the NIC assignments to be sure it's not a bad NIC.

                                Yes, i haven't change the NIC… how can I change NIC and keep the MAC-address?

                                1 Reply Last reply Reply Quote 0
                                • stephenw10S
                                  stephenw10 Netgate Administrator
                                  last edited by

                                  You could spoof the MAC onto the other NIC. That should be fine since it's in a different l2 segment.

                                  T 1 Reply Last reply Reply Quote 0
                                  • T
                                    tomasenskede @stephenw10
                                    last edited by

                                    @stephenw10 said in pfSense 2.7.0 stop working now and then:

                                    You could spoof the MAC onto the other NIC. That should be fine since it's in a different l2 segment.

                                    e3851a20-143f-4b0e-9b56-4ca6928429a3-image.png

                                    same with another NIC... so then it must be the media converter... or?

                                    T 1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Look at the error rate though. It's far far lower on igc3.

                                      Did it still fail to pass traffic when using igc3 as WAN?

                                      1 Reply Last reply Reply Quote 0
                                      • T
                                        tomasenskede @tomasenskede
                                        last edited by

                                        @tomasenskede

                                        Root cause identified and resolved!

                                        The issue was related to the Digitus Media converter, which didn't support mixed speeds. I had a 10 Gbps connection on one side and a 2.5 Gbps connection on the WAN side of pfSense.

                                        However, after replacing the media converter with a switch that had both 10 Gbps and 2.5 Gbps ports, the collisions and errors ceased.

                                        Case closed, and now my WAN data flows without any errors!

                                        1 Reply Last reply Reply Quote 1
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.