Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    pfSense 2.7.2 loss of WAN connection shortly after IP assignment.

    Scheduled Pinned Locked Moved General pfSense Questions
    12 Posts 3 Posters 736 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • A
      Aus_Karlos @stephenw10
      last edited by

      @stephenw10 Found the dhcp logs when the Static IP was assigned.

      Apr 10 07:28:59 	dhclient 	17457 	PREINIT
Apr 10 07:28:51 	dhclient 	38420 	exiting.
Apr 10 07:28:51 	dhclient 	38420 	connection closed
Apr 10 07:18:54 	dhclient 	38420 	bound to 110.xxx.xx.xxx -- renewal in 1800 seconds.
Apr 10 07:18:54 	dhclient 	83756 	Creating resolv.conf
Apr 10 07:18:54 	dhclient 	83268 	Adding new routes to interface: ixl0
Apr 10 07:18:54 	dhclient 	82312 	New Routers (ixl0): 110.xxx.xx.x
Apr 10 07:18:54 	dhclient 	80991 	New Subnet Mask (ixl0): 255.255.255.0
Apr 10 07:18:54 	dhclient 	80482 	New IP Address (ixl0): 110.xxx.xx.xxx
Apr 10 07:18:54 	dhclient 	79908 	ifconfig ixl0 inet 110.xxx.xx.xxx netmask 255.255.255.0 broadcast 255.255.255.255
Apr 10 07:18:54 	dhclient 	79288 	Starting add_new_address()
Apr 10 07:18:54 	dhclient 	78504 	BOUND
Apr 10 07:18:54 	dhclient 	38420 	DHCPACK from 58.162.26.129
Apr 10 07:18:53 	dhclient 	38420 	DHCPREQUEST on ixl0 to 255.255.255.255 port 67
Apr 10 07:18:53 	dhclient 	76936 	ARPCHECK
Apr 10 07:18:51 	dhclient 	70966 	ARPSEND
Apr 10 07:18:51 	dhclient 	38420 	DHCPOFFER from 58.162.26.129
Apr 10 07:18:51 	dhclient 	38420 	DHCPDISCOVER on ixl0 to 255.255.255.255 port 67 interval 2
Apr 10 07:18:44 	dhclient 	38420 	DHCPREQUEST on ixl0 to 255.255.255.255 port 67
Apr 10 07:18:40 	dhclient 	38420 	DHCPREQUEST on ixl0 to 255.255.255.255 port 67
Apr 10 07:18:38 	dhclient 	38420 	DHCPREQUEST on ixl0 to 255.255.255.255 port 67
Apr 10 07:18:36 	dhclient 	38420 	DHCPREQUEST on ixl0 to 255.255.255.255 port 67
Apr 10 07:18:36 	dhclient 	46514 	ARPCHECK
Apr 10 07:18:34 	dhclient 	41034 	ARPSEND
Apr 10 07:18:33 	dhclient 	38420 	DHCPOFFER from 58.162.26.129
Apr 10 07:18:33 	dhclient 	38420 	DHCPDISCOVER on ixl0 to 255.255.255.255 port 67 interval 2
Apr 10 07:18:33 	dhclient 	38420 	DHCPNAK from 144.133.168.168
Apr 10 07:18:33 	dhclient 	38420 	DHCPREQUEST on ixl0 to 255.255.255.255 port 67
Apr 10 07:18:33 	dhclient 	39160 	PREINIT

      It looks like it was only a few seconds before it closed the connection when I got my StaticIP.

      But then after that with the dynamic IPs the I get the following in the dhcp logs.

      bound to 60.225.56.64 -- renewal in 33993 seconds.

      Which is about 9hrs. However I have timed it properly and my connection drops out at the 30min mark down to the second.

      GertjanG 1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        @Aus_Karlos said in pfSense 2.7.2 loss of WAN connection shortly after IP assignment.:

        Apr 10 07:18:54 dhclient 38420 bound to 110.xxx.xx.xxx -- renewal in 1800 seconds.

        Hmm, only a 1h lease on the static IP. But the process is closed after 10mins. Did the link bounce?

        Do both leases come from the same DHCP server?

        A 1 Reply Last reply Reply Quote 0
        • GertjanG
          Gertjan @Aus_Karlos
          last edited by Gertjan

          @Aus_Karlos

          What is your definition of a static IP ?

          You've not selected a static IP setup on your WAN, but a DHCP (the D stands for Dynamic).

          This :
          e000247a-f837-4037-a118-0adf98fba3c1-image.png
          is completely different.
          So its the DHCP client that is used, "requesting" for upstream (ISP) if some server can give a DHCP lease.
          144.133.168.168 said : not me ^^
          But 58.162.26.129 gave a lease !
          For some unknown reason, the dhcp client continued requesting ..... strange.
          But our 58.162.26.129 insisted, and was finally accepted.

          bound to 110.xxx.xx.xxx -- renewal in 1800 seconds.

          You have a WAN IP, and it will get renewed in 30 minutes - the lease is valid for 1 hour, which is a more simple procedure.
          Still a bit short for a IPv4 lease. But hey, why not, not all ISPs are created equal.
          I'm curious to see what happened at this this "30 minutes" mark.

          10 minutes in :

          @Aus_Karlos said in pfSense 2.7.2 loss of WAN connection shortly after IP assignment.:

          Apr 10 07:28:51 dhclient 38420 exiting.
          Apr 10 07:28:51 dhclient 38420 connection closed

          what happened ?
          Check also the gateway logs (dpinger) -the connection became that bad that 'dpinger' pulled = reset the WAN - the plug ?
          And if so, if the connetion is bad, DHCP restarts but can't 'pass' neither.

          No "help me" PM's please. Use the forum, the community will thank you.
          Edit : and where are the logs ??

          A 1 Reply Last reply Reply Quote 0
          • A
            Aus_Karlos @stephenw10
            last edited by

            @stephenw10 No, the StaticIPs come from a different gateway (144.something.something )than the Dynamic ones im getting (60.255.xxx.xx). The link doesn't bounce as there are no other WAN adapters currently setup. The system can see 2x 1GB adapters and a 10Gbe LAN adapter. The second 1gb adapter is not setup under interfaces and the 10Gbe is the LAN interface.

            @Gertjan Telstra provide StaticIPs though DHCP for domestic home Business plans. They only provide true StaticIPs to commercial sites located in the CBD.

            1 Reply Last reply Reply Quote 0
            • A
              Aus_Karlos @Gertjan
              last edited by

              @Gertjan

              Apr 10 07:28:54 	dpinger 	52091 	exiting on signal 15
Apr 10 07:28:54 	dpinger 	52091 	WAN_DHCP 110.xxx.xx.x:: sendto error: 65
Apr 10 07:28:53 	dpinger 	52091 	WAN_DHCP 110.xxx.xx.x: sendto error: 65
Apr 10 07:27:57 	dpinger 	52091 	WAN_DHCP 110.xxx.xx.x: Alarm latency 0us stddev 0us loss 100%
Apr 10 07:27:55 	dpinger 	52091 	send_interval 500ms loss_interval 2000ms time_period 60000ms report_interval 0ms data_len 1 alert_interval 1000ms latency_alarm 500ms loss_alarm 20% alarm_hold 10000ms dest_addr 110.xxx.xx.x bind_addr 110.xxx.xx.xxx identifier "WAN_DHCP "
Apr 10 07:27:55 	dpinger 	26192 	exiting on signal 15
Apr 10 07:27:55 	dpinger 	95108 	exiting on signal 15
Apr 10 07:20:18 	dpinger 	95108 	WAN_DHCP 110.xxx.xx.x: Alarm latency 13842us stddev 2591us loss 22%
Apr 10 07:18:59 	dpinger 	95108 	send_interval 500ms loss_interval 2000ms time_period 60000ms report_interval 0ms data_len 1 alert_interval 1000ms latency_alarm 500ms loss_alarm 20% alarm_hold 10000ms dest_addr 110.xxx.xx.x bind_addr 110.xxx.xx.xxx identifier "WAN_DHCP "

              So it looks like im getting packet loss shortly after connecting with the StaticIP.

              GertjanG 1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by stephenw10

                It could be objecting to the monitoring pings. Try disabling gateway monitoring in Sys > Routing > Gateways, edit the gateway.

                If that works you can set the monitoring to some other IP.

                1 Reply Last reply Reply Quote 0
                • GertjanG
                  Gertjan @Aus_Karlos
                  last edited by

                  @Aus_Karlos said in pfSense 2.7.2 loss of WAN connection shortly after IP assignment.:

                  Apr 10 07:18:59 dpinger 95108 send_interval 500ms .....

                  Compare with the further above :

                  Apr 10 07:18:54 dhclient 38420 bound to 110.xxx.xx.xxx -- renewal in 1800 seconds.

                  This is the very same moment that the dhcpclient has been its job : all is well, a WAN IP is alive.

                  Less then 2 minutes later : the first ICMPs get lost : the connection degrades fast :

                  Apr 10 07:20:18 dpinger 95108 WAN_DHCP 110.xxx.xx.x: Alarm latency 13842us stddev 2591us loss 22%

                  and less then 10 minutes later (note : dpinger stayed silent !) , dpinger exists :

                  Apr 10 07:27:55 dpinger 95108 exiting on signal 1

                  probably because the WAN got reset. Like some one ripped out the cable.
                  I even tend to think : if it is not dpinger who did this, it it the physical connection that goes bad ?
                  What is the upstream device ? a modem ? router ?

                  And who is this :

                  Apr 10 07:27:55 dpinger 26192 exiting on signal 15

                  26192 and 95108 are different dpinger processses.
                  Do you have more then one WAN ?

                  Anyway, another dpinger gets spawn : process 52091 :

                  Apr 10 07:27:55 dpinger 52091 send_interval 500ms loss_interval 2000ms time_period 60000ms report_interval 0ms data_len 1 alert_interval 1000ms latency_alarm 500ms loss_alarm 20% alarm_hold 10000ms dest_addr 110.xxx.xx.x bind_addr 110.xxx.xx.xxx identifier "WAN_DHCP "

                  But it alarms-out right away with 100 % loss ...
                  And then the interface is pulled down, again, more like the link was pulled down like a cable disconnect :

                  Apr 10 07:28:53 dpinger 52091 WAN_DHCP 110.xxx.xx.x: sendto error: 65
                  Apr 10 07:28:54 dpinger 52091 WAN_DHCP 110.xxx.xx.x:: sendto error: 65

                  "sendto error" means : "the interface used has been removed from the system".

                  So, for dpinger, it's time to quiet as there is nothing more to do :

                  Apr 10 07:28:54 dpinger 52091 exiting on signal 15

                  Process 52091 stops ....

                  No "help me" PM's please. Use the forum, the community will thank you.
                  Edit : and where are the logs ??

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    That particular sendto error is 'no route': https://docs.netgate.com/pfsense/en/latest/troubleshooting/gateway-errors.html#sendto-error-65

                    So it lost the IP/gateway rather than the interface itself.

                    1 Reply Last reply Reply Quote 0
                    • A
                      Aus_Karlos
                      last edited by

                      Just waiting on my ISP report. The tech team was confused as even though the Business plan lists "StaticIP coming soon". The plan itself is only a StaticIP service and they have no clue as to why im getting Dynamic IPs. They have a theory that my service was somehow activated 2 weeks to early on their end and my account had yet to be configured. I got a message from the ISP on the 2nd of April saying the service is good to go. But it wasn't suppose to be active until the 12th tomorrow.

                      So hopefully my issue will be resolved soon.

                      1 Reply Last reply Reply Quote 1
                      • A
                        Aus_Karlos
                        last edited by

                        So its been a while but I got an update. It was Telstra. Which today is still unresolved. The lack of internal dashboard tools for their tech support makes it extremely difficult to identify any issues on their network something as simple as to view the current connected devices MAC address connected to the NTD they have to elevate it to NBNCo.

                        I switched over to Aussie Broadband and was setup in seconds with no issues. I even have framed Route setup and have a pool of static IP addresses I can use for online services. Not to mention the amount of tools at your disposal on the user dashboard portal.

                        1 Reply Last reply Reply Quote 1
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.