Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Fail to boot and reload filter after update 2.6.0 to 2.7.0

    Scheduled Pinned Locked Moved
    Problems Installing or Upgrading pfSense Software
    2
    20
    813
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • stephenw10S
      stephenw10 Netgate Administrator
      last edited by

      So you don't have a copy of the install media? Do you have backup of the config?

      Ok then run ifconfig and see what the status of your WAN is.

      As I asked previously, how was it configured? DHCP? PPPoE? Something more exotic?

      T 1 Reply Last reply Reply Quote 0
      • T
        Tnumarim @stephenw10
        last edited by

        @stephenw10 You are right, I did not make a backup of the config (stupid, I know). WAN was configured via PPPoE. I ran ifconfig and the Shell Output is as follows:
        igb0: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ​options=4e527bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,WOL_MAGIC,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
        ​ether 00:0d:b9:51:ff:4c
        ​inet6 fe80::20d:b9ff:fe51:ff4c%igb0 prefixlen 64 scopeid 0x1
        ​media: Ethernet autoselect (1000baseT <full-duplex>)
        ​status: active
        ​nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>
        igb1: flags=8863<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ​options=4e527bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,WOL_MAGIC,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
        ​ether 00:0d:b9:51:ff:4d
        ​inet6 fe80::20d:b9ff:fe51:ff4d%igb1 prefixlen 64 scopeid 0x2
        ​inet6 fe80::1:1%igb1 prefixlen 64 scopeid 0x2
        ​inet 192.168.2.1 netmask 0xffffff00 broadcast 192.168.2.255
        ​media: Ethernet autoselect (100baseTX <full-duplex>)
        ​status: active
        ​nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        igb2: flags=8822<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ​options=4e527bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,WOL_MAGIC,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
        ​ether 00:0d:b9:51:ff:4e
        ​media: Ethernet autoselect
        ​status: no carrier
        ​nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        igb3: flags=8822<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ​options=4e527bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,WOL_MAGIC,VLAN_HWFILTER,VLAN_HWTSO,RXCSUM_IPV6,TXCSUM_IPV6>
        ​ether 00:0d:b9:51:ff:4f
        ​media: Ethernet autoselect
        ​status: no carrier
        ​nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        enc0: flags=0<> metric 0 mtu 1536
        ​groups: enc
        ​nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        ​options=680003<RXCSUM,TXCSUM,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        ​inet6 ::1 prefixlen 128
        ​inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
        ​inet 127.0.0.1 netmask 0xff000000
        ​groups: lo
        ​nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        pfsync0: flags=0<> metric 0 mtu 1500
        ​groups: pfsync
        pflog0: flags=100<PROMISC> metric 0 mtu 33152
        ​groups: pflog
        pppoe0: flags=8890<POINTOPOINT,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ​description: WAN
        ​nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

        stephenw10S 1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator @Tnumarim
          last edited by

          @Tnumarim said in Fail to boot and reload filter after update 2.6.0 to 2.7.0:

          WAN was configured via PPPoE

          Urgh, that makes it a lot more tricky.

          Do you see the config still at /conf/config.xml?

          If you're using a serial console you can cat that and copy/paste it out of the terminal if you have to.

          If you still have SSH access you can just SCP that off the firewall.

          Finding someway to reinstall 2.7.2 directly is going to be the easiest solution here.

          T 1 Reply Last reply Reply Quote 0
          • T
            Tnumarim @stephenw10
            last edited by Tnumarim

            @stephenw10 I navigated to System>Advanced, Admin Access tab. This page shows Protocol HTTPS (SSL/TLS) checked and ‘Enable webConfigurator login autocomplete’ also checked. On same page ‘Enable Secure Shell’ not checked (selected). SSHd Key Only set to Password or Public Key. Shall I change something on this page? What do you mean with “you can just SCP that off the firewall”? What should I do there, can you describe exactly?
            The page with WAN Firewall Rules shows 2 rules: RFC 1918 networks and Reserved, Not assigned by IANA (Block bogon networks). Below on same page it is stated in red: No rules are currently defined for this interface. In fact 2 rules are shown. How can this be possible. All incoming connections on this interface will be blocked untill pass rules are added. That’s the reason why I have no WAN access. Would it help to add some rules and save these to the WAN interface?

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Oh I'm sorry I assumed it was not booting far enough to reach the GUI.

              OK if you have access to the GUI just go to Diag > Backup and download the config file there.

              Check Status > Interfaces. Does the ppp WAN show there? Is it disconnected? Will it connect manually?

              T 1 Reply Last reply Reply Quote 0
              • T
                Tnumarim @stephenw10
                last edited by

                @stephenw10 As outlined in above message #9 I did not make a backup of the config, so I cannot download it from Diag>Backup.
                Under Status > Interfaces WAN shows up as down but won’t connect after hitting the ‘Connect WAN’ button. On bottom of this page it is stated in red: ‘Using dial-on-demand will bring the connection up again if any packet triggers it. What can I do next to get my WAN connection back? The upgrade proces to 2.7.0 went quite smoothly and I did not notice any hickup during the whole proces.

                stephenw10S 1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator @Tnumarim
                  last edited by

                  @Tnumarim said in Fail to boot and reload filter after update 2.6.0 to 2.7.0:

                  I did not make a backup of the config, so I cannot download it from Diag>Backup.

                  Hmm, I'm not sure what you mean. If you can access that page you should be able to backup the current config. And any older config stored.

                  T 1 Reply Last reply Reply Quote 0
                  • T
                    Tnumarim @stephenw10
                    last edited by

                    @stephenw10 Do you mean that I should make a backup of my current configuration? Yes I can do that. But I have no babckup of my configuration before the update from 2.6.0 to 2.7.0. After preparing the backup file of the current config should I than use that XML file to restore this configuration under page Backup & Restore?

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      The config should still be valid. But you should also be able to download previous config versions from the config history tab there.

                      You can then use that to restore into a clean install if you need to.

                      I would try re-saving the WAN interface and then checking the logs for any errors.

                      T 1 Reply Last reply Reply Quote 0
                      • T
                        Tnumarim @stephenw10
                        last edited by

                        @stephenw10 Under Config History there is one file (Local Database) which was saved yesterday with designation ‘Creating restore point before upgrade’. Should I download that config to restore into a clean install?
                        I also made a backup of the interfaces. How can I check the logs for errors?

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          Yes, download that file too. Compare it with the other config you downloaded.

                          Look in Status > System Logs after resaving the WAN.

                          T 1 Reply Last reply Reply Quote 0
                          • T
                            Tnumarim @stephenw10
                            last edited by

                            @stephenw10 Steve, I will continue tomorrow with your valuble new suggestions to solve my problem and will let you know the results.
                            Thanks sofar, Felix

                            1 Reply Last reply Reply Quote 1
                            • First post
                              Last post