pfSense doesn not respond to ARPs
-
Can we see an actual pcap file with the failed ARP? I assume the MAC addresses are correct?
And to be clear it resumes correct function after rebooting the 6100?
I forget what other tests we did there. Replugging the WAN cable? Resaving the interface? Either bring it back?
-
That is correct, 6100 is working again after a reboot.
Can you DM the link I can use to upload the pcaps? -
You can upload them here: https://nc.netgate.com/nextcloud/s/tMRseYCQ2HWzkKs
-
@stephenw10 files uploaded.
2x different capture points but same story.
-
@stephenw10
what do you think about the pcaps? -
@michmoor you don't have the ethernet filtering enabled do you? With that it is possible to block arp..
-
@johnpoz said in pfSense doesn not respond to ARPs:
@michmoor you don't have the ethernet filtering enabled do you? With that it is possible to block arp..
Turned off. Never used it actually
-
Interesting. Were they filtered?
I'm not sure why we see the ARP requests from pfSense in the modem mirror but not in the pfSense mirror?
Also interesting that we see ARP requests from the modem but from 192.168.1.254.
-
@stephenw10
What do you mean by filtered?
My theory right now is that the card is faulty. Although we see the modem responding it may not be processing within the card. I can’t think of anything else.
Cables have been swapped
Modems have been swapped
The only solution is the igc card and the problem goes away -
I mean when you ran the pcap was it capturing all traffic or was it filtering by just a limited set of MAC addresses or IP addresses for example?
