SG-5100 doesn't issue IP address anymore

stephenw10

That is a secondary error showing it can't create the notices file. But something before that would have triggered the notice. Is anything else logged?

It may have been something during the upgrade that no longer applies. Is it still failing after rebooting?

Steve

pf_fw

Trying to reinstall and can't connect to netgate servers.
Looked at /var/log/messages
and there is:

Nov 27 20:06:37 pfSense-install dhclient[4562]: unknown dhcp option value 0x7d
Nov 27 20:06:37 pfSense-install dhclient[4572]: New IP Address (igb1): 192.168.1.65
Nov 27 20:06:37 pfSense-install dhclient[4576]: New Subnet Mask (igb1): 255.255.255.0
Nov 27 20:06:37 pfSense-install dhclient[4580]: New Broadcast Address (igb1): 192.168.1.255
Nov 27 20:06:37 pfSense-install dhclient[4584]: New Routers (igb1): 192.168.1.254
Nov 27 20:06:41 pfSense-install ntpd[4698]: ntpd 4.2.8p18@1.4062-o Thu Sep 19 15:48:05 UTC 2024 (1): Starting
Nov 27 20:06:41 pfSense-install ntpd[4698]: Command line: /usr/local/sbin/ntpd -g -q -c /tmp/tmp.ArmLJsvhjx 216.239.35.0 216.239.35.4 216.239.35.8 2
16.239.35.12
Nov 27 20:06:41 pfSense-install ntpd[4698]: ----------------------------------------------------
Nov 27 20:06:41 pfSense-install ntpd[4698]: ntp-4 is maintained by Network Time Foundation,
Nov 27 20:06:41 pfSense-install ntpd[4698]: Inc. (NTF), a non-profit 501(c)(3) public-benefit
Nov 27 20:06:41 pfSense-install ntpd[4698]: corporation.  Support and training for ntp-4 are
Nov 27 20:06:41 pfSense-install ntpd[4698]: available at https://www.nwtime.org/support
Nov 27 20:06:41 pfSense-install ntpd[4698]: ----------------------------------------------------
Nov 27 20:07:21 pfSense-install ntpd[4698]: ntpd exiting on signal 15 (Terminated)

Checking further

pf_fw

@stephenw10 I've started process of re-installation at this point and that also is not going forward (not able to connect to servers) so chasing that right now

stephenw10

You're seeing an error in the installer?

pf_fw

@stephenw10 yes, installer can't proceed. it reports can't reach servers dropped to shell to look at var/log/messages

stephenw10

The network config should still apply at that point so try to ping ews.netgate.com from the shell and see what error you see.

stephenw10

It looks like your upstream router is using 192.168.1.X so that could conflict with a LAN subnet in the installer.

pf_fw

@stephenw10 Should I update settings for upstream router (modem in this case)? or any other way to resolve this? (maybe use 192.168.2.x with static? assuming modem supports it)

pf_fw

@stephenw10 I see

root@pfSense-install:~ # ping ews.netgate.com
ping: cannot resolve ews.netgate.com: Address family for hostname not supported

stephenw10

Yes you can set a different subnet for the LAN in the installer. Or just not assign a LAN interface. You only need a valid WAN.

pf_fw

@stephenw10 oh I'm only using WAN port on SG-5100. WAN port is connected to modem, all other ports are disconnected (no cables)
Using following on WAN side:

M Interface Mode     DHCP (client)  
 VLAN Settings      VLAN Tagging disabled         │ │
Use local resolver false

Using Local resolver seems to go through, will report back if it finishes

stephenw10

But if the LAN is still configured that still a routing conflict even if it's disconnected.

pf_fw

Using Local Resolver worked for installation. Now trying to restore, will see how that goes (not sure if I need to install packages manually)

stephenw10

It should pull in the packages if they are in the config.

pf_fw

@stephenw10 oh nice, thanks. I'll check back in few hrs (and report if anything is missing). Does 7MB of config file sound correct? I've 2 backups from almost same time (1st is about 83kB and other is 7MB, I'm going with bigger one)

stephenw10

7MB is pretty huge for a config file but it might have all the RRD data in it if you selected that when backing up. It should restore fine.

pf_fw

@stephenw10 stopped with message:
package reinstall process was ABORTED due to lack of internet activity is there way to work around this?
I believe this is happening due to one of the VPN servers being used at the time of backup, not available anymore

pf_fw

@stephenw10 which area is responsible for installing packages? (will restore that before other config)

stephenw10

You should almost always restore the full config. The config file version is only held in the main system section and that is what determines whether or not the config needs to be upgraded.

Only ever restore parts of the config if you're certain it's the current version. Even then I would always restore the full file unless I have a very specific reason not to.

pf_fw

@stephenw10 I see, how would I go about this then? Does restore still go through if packages are not installed