Yes, I know! Another OPT1 and OPT2 no internet connection!
-
I have used pfSense CE for a few years and am relatively competent with anything IT.
Yesterday after installing Kea on my router as suggested it was simply totally borked.
So, I decided to do a fresh re-install as it had been quite a long time (2 yrs ++) with just the upgrades as they became available.
I have now, spent nearly two days trying to get over this issue of not being able to connect to the internet from OPT1 and OPT2, no issues with LAN or WAN. The setings are all default except the firewall rules allowing IPv4 any from all subnet OPTx. Enabled DHCP server on both OPT1 and OPT2 with correct subnet, pool range and gateway. I have now re-installed it from scratch four times, all to no avail.
Given that its is the same for OPT1 and OPT2 I do not think the issue is hardware related. I am now wondering if, given I re-install over a borked pfsense, there is a remnant on the drive that somehow does not get deleted/overwritten.
I am at a loss. Fresh new install , all defaults except for subnet values and adding OPT1 and OPT2. It does not work with Kea or legacy!
Any suggestions? I have read all posts found on this forum with a search of "OPT1 internet not working" and I found no solutions.
Thanks
-
@MidGe48 DNS?
Did you try to ping?
Ping a site by name and IP, does either work? (from the OPT port of course.) -
HI Jarhead,
Thanks for your attention to this.
No, I cannot ping, I get a temporary failure in name resolution. So that means the issue is a DNS issue. But the defaults should work, no?
-
My General DNS Resolver options select all Network Interfaces and all Outgoing. I tried selecting just the "ALL" option and then selected every one of the options individually just to make sure. Neither worked.
-
ping by ip fails as network unreachable?!
And my computer on that subnet does not get an ip either, so dhcp deems to be failing!
-
@MidGe48
Maybe you will find something in the Status / System Logs / System / General or DHCP?
What setting are for the OPT1 and OPT2 interfaces shown on the Services / DHCP Server pages? -
yes, I had look at those already. Went and look again. Did not see anything different for the LAN or either of OPT1 or OPT2. It seems to go to similar things being logged. definitely no "errors".
-
@w0w
Services/DHCP pages are the same for LAN, OPT1 and OPT2 with only the ip's being different, reflecting the three different subnets. -
@MidGe48 said in Yes, I know! Another OPT1 and OPT2 no internet connection!:
@w0w
Services/DHCP pages are the same for LAN, OPT1 and OPT2 with only the ip's being different, reflecting the three different subnets.Did you try to restore some saved known working config? I wouldn’t be surprised that some detail was missed.
Can clients connected to OPT1 and OPT2 ping pfSense when you have set a static IP address on the client itself? -
@MidGe48 said in Yes, I know! Another OPT1 and OPT2 no internet connection!:
And my computer on that subnet does not get an ip eithe
Well no wonder dns fails.. Nothing is going to work if your device doesn't have an IP. How would you query for dns if you have no IP?
And if the device on opt1 or opt2 is not getting an IP from dhcp. Doesn't even matter if you had put the correct rules on opt1 and 2..
You need to make sure the device is getting an IP before you could even look to rules not being correct on the interface, or if dns was running, etc.
If you did a clean install on a 2100, the ports would all switch back to the lan via the switch?
https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/configuring-the-switch-ports.html
-
Hi Johnpoz,
The answer you give is not relevant. I am not setting VLAN's at all. These ports [OPT1 and OPT2] are for discreet physical LAN networks.
The docs page that is relevant for this is https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/opt-lan.html.
But thanks for trying to help. I may not have been clear enough in my original post.
-
@MidGe48 said in Yes, I know! Another OPT1 and OPT2 no internet connection!:
These ports [OPT1 and OPT2] are for discreet physical LAN networks.
And since your on a switch, you would have to set those up in the switch to be discrete.. Which the link I posted.
The 2100 has a switch, they default to all being the lan, if you want to break out ports to be discrete - you have to set them up to do that..
if your not using a 2100, my bad and I apologize - maybe I confused this thread with another one.. Not sure where I got you were using a 2100??
-
@johnpoz said in Yes, I know! Another OPT1 and OPT2 no internet connection!:
2100
Is this a 2100?
Does it work if you don't use Kea?
-
Unfortunately no saved configs. I though that with a fresh install I would have no need and deleted them as soon as I thought everything was working fine.
I am going to give it one more try with a fresh install, if that fails, I will have to look into some alternatives, which is a pity as after a few years, I was quite conversant with ipSense which had been running very solidly.
-
@stephenw10 said in Yes, I know! Another OPT1 and OPT2 no internet connection!:
Is this a 2100?
That might have been my bad Steve - not sure where I got he was on a 2100.. Looking over the thread I don't see where he stated that.. Doh!!
-
-
@MidGe48 well if its discrete and your not getting an IP from dhcp, then either dhcp is not running on that interface? Or your connection isn't valid.
You validated dhcp is running and listening on that interface.. Does it log show anything from client(s) on this network.. Dhcp would work with zero rules on the interface, because when you enable dhcp hidden rules are created that allow for dhcp.
So either dhcp is not running, or its not seeing any requests/discovers. etc.. or it doesn't have any leases available?
Other possible thing - you sure your assigned to the correct interfaces on the box? Does the interface show up when you plug in your device or switch?
-
Ok, managed to install a last known working configuration.
Unfortunately , the interfaces for OPT1 and OPT2 show "autoselected" but disable (red cross) on the gui.
Also when restoring from backup, the packages that were installed are not. When I go to package manager, it shows none installed and when I go to available packages it shows me "Unable to retrieve package information.".
That being said, the LAN port works and devices connected to it can access the internet, etc.
I am now wondering, if OPT1 and OPT2 are borked. Although it is quite unlikely to have two ports borked simultaneously and the third (LAN) and fourth (WAN) not.
I am not sure how to test whether there is a hardware fault on these ports. The lights at the connection are on (unblinking of course).
-
Run
ifconfigat the command line and see which NICs are actually linked. Unplug one of the OPT ports and make sure the one that goes down if what you think it is. -
Some progress being made.
On my test (for this exercise) machine running Linux. Changing the connection type from "Automatic (DHCP)" to "Automatic (DHCP) addresses only" the bringing eth0 down and back up and it connects correctly and gets an ip address, of course. That is all on a working version before last upgrade and before switching to Kea.
So, now the issue is that one of the failing interfaces connect all sorts of IOT and media devices that I do not want to get into other subnets on my network (paranoia about privacy :) ). I am not sure if can change the way they request a DHCP connection. Or I may need change the way the DHCP server handles that. But there must have been a change very recently because I have had no such issues for a few years at least with my current network topology.
But thanks all for your help.
