Netgate 7100-1U New NIC setup issues
-
@stephenw10 both my modem router from isp and netgate router are set with 24 /cidr
255.255.255.0 subnet /how would it interfere ?
Currently my netgate router is set on lan side of the isp modem router -
@Sammy2Netgo said in Netgate 7100-1U New NIC setup issues:
One funny thing i noticed is in console it shows the sfp i wanna use as lan to external switch is ix3 so when i did that i only see rx not tx but when i put ix1 as LAN switch showing rx & tx connectivity.Originally on the front face panel it does show the sfp port labeled ix1.Any ideas ?
When you put the expansion card in the ports on that card become ix0 and ix1.
If you are connecting to the on-board SFP+ port labelled
ix1that will no be ix3 so that's what you should use as LAN.However, as I said, you can confirm that by running at the command line:
ifconfig -vm ix3
You should see the link as up and the correct SFP module data reported.If you disconnnect it and re-run that command you can confirm the NIC then goes down.
If you see that then the issue is probably in the switch config.
The subnet size (mask) doesn't matter as long as the two subnets do not conflict. So by default pfSense uses 192.168.1.1/24 for the LAN. The WAN must be in some other subnet.
What do you actually see reported at the console? Can you copy/paste it here?
-
@stephenw10 im currently out of office but will let you know as soon as i get back / Thanx
-
@stephenw10 how would i start command line
Is it selecting 8 shell ?
Here is my new port settings in console :
Wan >ix0
Lan >ix3
Opt1>lagg0.4090
Opt2>ix1I finally see mac address of router showing in my switch but still no connection devices hooked to switch not connecting -Devices show dhcp lease ip
But not connecting or saying cant get an ip address is it maybe some setting in switch i need to configure ? -
Yes use option 8 from the console menu to reach the command line.
Then run:
ifconfig -vm ix3Make sure it shows as up and linked.
Unplug the SFP and run that again. Make sure it now shows as down to confirm that's actually the LAN NIC.
Be sure the addresses shown above the menu for WAN and LAN do not conflict.
For example:
Netgate 7100 - Netgate Device ID: ba27a9eaeaeaea439bacb *** Welcome to Netgate pfSense Plus 24.08-DEVELOPMENT (amd64) on 7100 *** Current Boot Environment: default_20240624180133_20240903152424 Next Boot Environment: default_20240624180133_20240903152424 LAN (lan) -> ix2 -> v4: 192.168.88.1/24 OPT1 (opt1) -> ix0 -> WAN (wan) -> lagg0 -> v4/DHCP4: 172.21.16.30/24 -
@stephenw10 how would i tell if wan lan has ip conflict ?
I was wondering while setting this up is it safe to have netgate router wan hooked up directly to isp modem wan that obtains external ip or behind firewall as lan under private ipv4?(netgate router wan to isp modem router lan)
Currently my wan and lan have private ip
As i put netgate wan to isp modem lan behind firewall
Wan -> 192.168.2.1
Lan >192.168.1.200
Is that ok or would it cause issues? Readon i did that is im not sure if firewall is setup properly and dont want to expose router to attacks -
@Sammy2Netgo once i get back i will run the cli and paste the results here /Thanx
-
As long as those subnets are both /24 (or smaller) that's fine.
-
@Sammy2Netgo
I ran the cli with sfp plugged in results :[24,03-RELERSE][root@pfSense.home,arpa]/root: ifconfig -vm ix3
1x3: flags=1008843<UP, BROADCAST, RUNNING,SIMPLEX,MULTICAST, LOWER UP> metric 0 mtu 1500
options=4138bb<RXCSUM,TXCSUM, VLAN_MTU,VLAN_ HUTACGING, JUMBO_MTU, VLAN_ HUCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC,VLAN_HUFILTER, RXCSUM_IPV6,TXCSUM_IPV6, HUSTATS,MEXTPG>
capabilities=4/53bb<RXCSUM, TXCSUM, VLAN_MTU, VLAN_HUTAGGING, JUMBO_MTU, VLAN_ HUCSUM, TS04, TSO6,LRO, WOLLUCAST ,WOL_MCAST, WOL_ MAGIC, VLAN HUFILTER, VLAN_HUTSO, NETMAP, RCSUM_IPV6, TXCSUM IPV6, HUSTATS, MEXTPG>
ether 00:08:a2:12:87:27
inet 192.168.208.200 netmask 0xffffff00 broadcast 192.168.208.255
inet fe80::9e69:b4ff:fe63;6cca&ix3 prefixlen 64 scopeid Oxe
media: Ethernet autoselect (10Cbase-Twinax <full-duplex,rxpause, txpause>)
status: active supported media;
media autoselect media 10Gbase-Twinax
nd6 options=21<PERFORMNUD, AUTO_LINKLOCAL>
drivername: ix3
plugged: SFP/SFP+/SFP28 Unknown (Copper pigtail)
vendor: DEM PN: SFP-H10GB-CU1M SN: CSC200801600244 DATE: 2020-08-14
[24.03-RELEASE1Lroot&pfSense.home,arpa/root:
124,03-RELEASE] [root.@pfSense.home,arpal/root: -
@Sammy2Netgo results with sfp unplugged -
(24,03-RELEASE][root&pfSense,home,arpa]/root:
(24,03-RELEASE1[root&pfSense.home.arpal/root: ifconfig -vm 1x3
ix3: flags=1008843<UP ,BROADCAST, RUNNING,SIMPLEX, MULTICAST, LOWER UP> metric 0 mtu 1500
options=4138bb<RXCSUM, TXCSUM, VLAN_ MTU, VLAM_ HUTAGGING, JUMBO_MTU, VLAN HUCSUM, WOLUCAST, WOL.MCAST,MOLMACIC, VLAN_HUFILTER, RCSUM_1PV6, TICSUM_ IPV6, HUSTATS, MEXTPG>
capabilities=4f53/bb<RXCSUM,TXCSUM, VLAN_MTU, VLAN_HUTAGING, JUMBO_MTU, VLAN_HUCSUM, TSO4, TSOG,LRO,WOLUCAST, WOL_MCAST, MOL_ MAGIC, VLAN_HUFILTER, VLAN_HWTSO,NETMAP, RICSUM_IPV6, TXCSUM_IPV,HUSTATS, MEXTPG>
ether 00:08:a2:12:87:27
inet 192,168.208.200 netmask 0xffffff00 broadcast 192.168.208.255
inet fe80::9e69;b4ff:fe63:6cca%ix3 prefixlen 64 scopeid Oxe
media: Ethernet autoselect
status: no carrier supported media:
media autoselect media 10Gbase-Twinax
nd6 options=21<PERFORMNUD, AUTO_LINKLOCAL>
drivername: ix3 -
@Sammy2Netgo
Here is my current assignments setup:
Wan>ix0 ovtained ip
Lan>ix3 dhcp Ip & gateway set
Opt1>lagg0.4090
Opt2>lagg0.4091
Im so confused whats causing this issue i should be connecting through switch but am not is it something wrong with netgate dhcp server not working properly or blocking it ? Nit sure why netmask showing as 0xffffff00
How do i switch from root back to console or end root to go back ? -
@Sammy2Netgo my device now thats plugged into external switch niw getting dhcp lease from isp modem/router instead netgate router this is messed up
-
The LAN interface should not have a gateway configured on it directly.
The only reason you would ever have a gateway on LAN would be if you had a downstream router connected to it. That could be a layer3 switch but you would then need to have static routes setup to other downstream subnets. You are not using anything like that as I understand it so you should remove the gateway.
The NIC results are as expected so you have the correct NIC configured.
Physically how are these things connected?
There must be some layer 2 connection to the ISP router if clients are pulling a lease from there. So a misconfigured vlan on the switch perhaps?
-
@stephenw10 i did factory reset and will be configuring negate through isp wan external ip .
I have fiber sfp xgpon hooked to isp router/modem and from there hooked to netgate wan ixo and ix3 hooked sfp+ to external switch -
@Sammy2Netgo do i need to setup vlans during first initial interface config ?
-
@Sammy2Netgo do i need opt 1 & opt 2 set in interface assignments ?
I started with
Wan ix0
Lan ix3
I left out opt 1 opt2 -
This post is deleted! -
@stephenw10 but my dhcp on lan will need to have gateway set on dhcp lan to be able to connect to router gui from switch ??
This is how i set lan ix3 settings :
Enter lan ipv4 -192.168.xxx.xxx
Subnet mask -24
For wan enter lan ipv4 upstream gateway adress :
Enter for none
Enable dchp server on lan -yes
Start ip range -192.168.1.0
End ip range -192.168.1.255 -
No you shouldn't need to setup any VLANs to get initial connectivity. You are not using the on-board switch. JUst WAN and LAN configured like that should be fine.
-
@Sammy2Netgo said in Netgate 7100-1U New NIC setup issues:
but my dhcp on lan will need to have gateway set on dhcp lan to be able to connect to router gui from switch ??
Yes, but that's not what a gateway on the interface itself is for. That defines what pfSense itself uses as a gateway. The DHCP server will pass the interface address to clients to use as a gateway.
