Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Network becomes totally unusable when my parents connect

    Scheduled Pinned Locked Moved General pfSense Questions
    88 Posts 10 Posters 4.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      RickyBaker @stephenw10
      last edited by

      @stephenw10 yeah same. No errors in the log now that I have unplugged the SFP+ cable that was a redundant connection to my unRAID...

      R 1 Reply Last reply Reply Quote 1
      • R
        RickyBaker @RickyBaker
        last edited by

        @RickyBaker Anyone have any suggestions for logs i can pull to try to isolate the problem? My wife is getting pretty mad at me:)

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @RickyBaker
          last edited by johnpoz

          @RickyBaker I thought your problem went away when you pulled your 2nd connection to your nas.

          now that I have unplugged the SFP+ cable that was a redundant connection to my unRAID...

          If one device connects and takes out your whole network - they are either creating a loop storm with traffic they are sending out, or are the loop or they are stepping on an IP.. Or they are just spewing so much garbage that even without a loop its causing you problems.

          Have you just done a basic sniff with something on the network - wireshark, tcpdump - get a baseline when your network is working.. Now connect the device that causes you problems.. Any sort of storm will be obvious..

          I had a nic go bad one time - that was just spewing garbage on the line.. I mean its rare that a nic would fail like that.. But can happen..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.7.2, 24.11

          R 2 Replies Last reply Reply Quote 1
          • R
            RickyBaker @johnpoz
            last edited by

            @johnpoz i have not, i find wireshark intimidating, but I did download it last time I had a problem and was able to get the troubleshooting i needed. I'll do the same. The offending device is back no longer available to me. My parents went back home, but the internet is still very slow to load pretty much any webpage (with the speedtest being fine...once the website loads).

            I'll try to do a basic sniff tonight

            1 Reply Last reply Reply Quote 0
            • R
              RickyBaker @johnpoz
              last edited by

              @johnpoz said in Network becomes totally unusable when my parents connect:

              I thought your problem went away when you pulled your 2nd connection to your nas.

              No, there was no noticeable improvement in internet quality, but the error of 2 devices trying to use the same IP address disappeared from the Unifi system logs.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @RickyBaker
                last edited by johnpoz

                @RickyBaker well you prob had duplicate IP on your nas.. Or your offending device was stepping on one of the nas IPs. But if your unless your dns or pfsense is running on your unraid box.. That should have zero to do with normal internet access.

                Do a simple dns query for something.. I like to use dig but nslookup works too.. nslookup is better if you set debug

                Normally clients just ask pfsense IP for dns, and then unbound on dns resolves it - are you doing anything different than out of the box default in your unbound settings?

                Do you have it set to register dhcp - if you have lots of dhcp traffic this can cause restarts.. If it is doing that every few minutes or seconds than yeah your going to have horrible dns..

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                R 1 Reply Last reply Reply Quote 1
                • R
                  RickyBaker @johnpoz
                  last edited by

                  @johnpoz said in Network becomes totally unusable when my parents connect:

                  Normally clients just ask pfsense IP for dns, and then unbound on dns resolves it - are you doing anything different than out of the box default in your unbound settings?

                  ahhh shoot I never saw your response and was hacking it by myself. We did something similar to this is a previous thread about DNS resolver that we resolved by adding "do-ip6:no" to the advanced settings. I remember being very out of my depth with nslookup and dig but I'll go back to the thread and retrace those steps. In the meantime here's a bunch of my DNSResolver log if there's any obvious clues in there.

                  https://pastebin.com/KRurBaVt

                  I just did a hard reset on all the equipment and it seems to have had no affect. The interent, and specifically pulling up webpages seems slow a LOT of the time but not ALL the time. And sometimes it completely locks up, I get err_time outs from browser. and curiously since i'm looking at my Google Hub Max, that will spin with a "Connecting" graphic and after a few seconds everything will work again for a few minutes before it happens again. If I click on an article in the Google feed on my phone, it will, usually, eventually show up but can take up to 10 seconds or so.

                  I'll work on other NSlookup dig stuff, but if you have any ideas that would be very appreciated.

                  R 1 Reply Last reply Reply Quote 0
                  • R
                    RickyBaker @RickyBaker
                    last edited by

                    Well i found something def not good while trouble shooting something unrelated...

                    c61303c9-76aa-42ee-92a3-d5eeed38b0c4-image.png

                    M P 2 Replies Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Yeah, that's definitely not good! 😬

                      1 Reply Last reply Reply Quote 1
                      • M
                        michmoor LAYER 8 Rebel Alliance @RickyBaker
                        last edited by

                        @RickyBaker You sure its unrelated?

                        Firewall: NetGate,Palo Alto-VM,Juniper SRX
                        Routing: Juniper, Arista, Cisco
                        Switching: Juniper, Arista, Cisco
                        Wireless: Unifi, Aruba IAP
                        JNCIP,CCNP Enterprise

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by

                          The think he was investigating when he found it was unrelated but it sure seems related to this! 😉

                          M 1 Reply Last reply Reply Quote 2
                          • M
                            michmoor LAYER 8 Rebel Alliance @stephenw10
                            last edited by

                            @stephenw10 yep yep that’s why I asked 🤔
                            layer2 loops point to a bigger issue

                            Firewall: NetGate,Palo Alto-VM,Juniper SRX
                            Routing: Juniper, Arista, Cisco
                            Switching: Juniper, Arista, Cisco
                            Wireless: Unifi, Aruba IAP
                            JNCIP,CCNP Enterprise

                            R 1 Reply Last reply Reply Quote 1
                            • R
                              RickyBaker @michmoor
                              last edited by

                              @michmoor not 100% sure it's unrelated. I have static IP's assigned to all the AP's and never an issue, so something "not good" is happening that I don't understand. However I unplugged the offending port and still experiencing very slow load times (if at all). Also feels like the STP should have affectively taken care of it if that was the issue (effectively turning it off) the AP was in MESH mode anyways. I'll report when I figure something out...

                              stephenw10S 1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator @RickyBaker
                                last edited by stephenw10

                                @RickyBaker said in Network becomes totally unusable when my parents connect:

                                AP was in MESH mode

                                Hmm, that could create a loop.

                                Or at least end up routing traffic poorly. I would always avoid WiFi mesh if at all possible.

                                R 1 Reply Last reply Reply Quote 1
                                • R
                                  RickyBaker @stephenw10
                                  last edited by

                                  @stephenw10 I understand that theory but I just assumed that when the port was shut off to network traffic (but still sending power) it simply switched from broadcasting a full signal to simply repeating a nearby signal. Perhaps this is an inaccurate assumption.

                                  Haven't found the source of anything yet but there's something colliding/suboptimal going on here
                                  7f0f1141-d991-42ea-9ca4-e1cb9a09c241-image.png

                                  1 Reply Last reply Reply Quote 1
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    It could behave like that but Mesh can be tricky! I have seen it do weird stuff with some vendors. Like for example prefer using multiple wireless hops when a local wired connection was available resulting in terrible throughput.

                                    R 1 Reply Last reply Reply Quote 2
                                    • R
                                      RickyBaker @stephenw10
                                      last edited by

                                      @stephenw10 STP should have effectively turned off the port anyways, though i suppose crazy Mesh activity might have still caused problems, sure, but i'm still experiencing issues and the ethernet cord to the offending AP is completely unplugged (not to mention my VSSL zone audio amplifier/streamer and Home Assistant RPi are also unplugged...)

                                      I guess i need some good data from wireshark, i'll try for that tonight.

                                      P G 2 Replies Last reply Reply Quote 0
                                      • P
                                        Patch @RickyBaker
                                        last edited by

                                        @RickyBaker personally I would simplify (wired only single path), then slowly rebuild.

                                        Having dual paths, relying devices to block it and then expecting optimal throughput is overly optimistic imo.

                                        R 1 Reply Last reply Reply Quote 2
                                        • G
                                          Gblenn @RickyBaker
                                          last edited by Gblenn

                                          @RickyBaker How many AP's and what channels are you using?
                                          You will run into trouble if you reuse channels on adjacent AP's, giving a ton of interference. Also, with as many 14 clients that you have on one channel 2.4Ghz, I'm not surprised you see all those retries.

                                          1 Reply Last reply Reply Quote 1
                                          • R
                                            RickyBaker @Patch
                                            last edited by

                                            @Patch said in Network becomes totally unusable when my parents connect:

                                            @RickyBaker personally I would simplify (wired only single path), then slowly rebuild.

                                            Do you mean just one AP at first? not devices? I'm not sure how to kick everything off....would essentially be easier to just start over from scratch (shudder).

                                            @Gblenn said in Network becomes totally unusable when my parents connect:

                                            @RickyBaker How many AP's and what channels are you using?

                                            6 AP's i'm not sure about channel but I can check later today. I plan on doing extensive testing on my only wired desktop.

                                            I also fired up Wireshark before I left for work...I don't have much experience with it, can anybody suggest what I should be doing with it when I get home? what to look for? Any tutorial on using it to troubleshoot an issue such as mine?

                                            G P 2 Replies Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.