Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Network becomes totally unusable when my parents connect

    General pfSense Questions
    10
    88
    4.5k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • bmeeksB
      bmeeks
      last edited by bmeeks

      I believe you have two different issues. The most obvious as has been stated is a Layer 2 loop. You have something miswired/misrouted.

      The problem with your parents' device is I belive a duplicate IP address. Could they maybe have had a statically assigned IP address in one of their devices that matched the IP address of a critical component in your local network such as perhaps one of the firewall interfaces? The symptoms you described at that time (way back up earlier in this thread) sure sounded like a duplicate IP address problem.

      R 1 Reply Last reply Reply Quote 1
      • R
        RickyBaker @RickyBaker
        last edited by

        Not sure what this means but I was just poking around pfsense and saw that the ipv6 Configuration type was set to Track Interface. Seeing as this was an issue when i was having a DNSResolver issue and that i'm not using ipv6 (intentionally at least) I turned it to none but got 2 errors about disabling DHCPv6 Server and Router Advertisement first. I really don't know what the second thing is or what disabling it will break but i'm desparate so I'm giving "None" a try....

        246f8e85-e112-4c41-ad30-99f25d017ee3-image.png

        bmeeksB 1 Reply Last reply Reply Quote 0
        • bmeeksB
          bmeeks @RickyBaker
          last edited by bmeeks

          @RickyBaker said in Network becomes totally unusable when my parents connect:

          got 2 errors about disabling DHCPv6 Server and Router Advertisement first. I really don't know what the second thing is or what disabling it will break

          If you have no IPv6 available from your ISP and you have not configured your WAN to use it, then it won't break anything. You can go to SERVICES > ROUTER ADVERISEMENT and set the RA daemon to "disabled" on all interfaces. Why did you turn this on in the first place?

          If you are just browsing around in pfSense and randomly clicking stuff without knowing what it specifically does, then no wonder you are having issues 😀. You might benefit from a completely fresh green-field reinstall WITHOUT importing any old configuration.

          R 1 Reply Last reply Reply Quote 0
          • R
            RickyBaker @bmeeks
            last edited by

            @bmeeks said in Network becomes totally unusable when my parents connect:

            You have something miswired/misrouted.

            I agree, just having a hard time tracking this down...

            @bmeeks said in Network becomes totally unusable when my parents connect:

            The problem with your parents' device is I belive a duplicate IP address. Could they maybe have had a statically assigned IP address in one of their devices that matched the IP address of a critical component in your local network such as perhaps one of the firewall interfaces?

            I also can get behind this theory as well, especially the second part of it.

            All their devices were configured to get an IP from the DHCP server (though were also originally configured to randomize the mac address, which i changed). Also I use 10.10.10.1/24 and there is no way they have a statically assigned address in that range. If i was using 192.168.1.1/24 sure i could believe it but just very unlikely anything is statically assigned to the 10.10.10.1 range. Though maybe it has something to do with their devices barfing at that subnet....

            bmeeksB 1 Reply Last reply Reply Quote 0
            • R
              RickyBaker @bmeeks
              last edited by

              @bmeeks said in Network becomes totally unusable when my parents connect:

              If you have no IPv6 available from your ISP and you have not configured your WAN to use it, then it won't break anything. You can go to SERVICES > ROUTER ADVERISEMENT and set the RA daemon to "disabled" on all interfaces. Why did you turn this on in the first place?

              I have att fiber so I assume it's available but I don't intentionally use it. I do not remember ever turning this on.

              @bmeeks said in Network becomes totally unusable when my parents connect:

              then no wonder you are having issues .

              these are desperate times. I do NOT do this normally.

              @bmeeks said in Network becomes totally unusable when my parents connect:

              You might benefit from a completely fresh green-field reinstall WITHOUT importing any old configuration.

              This is getting closer and closer to possible. I simply don't know what to do and REALLY don't want to reattach all my hundreds of devices again....

              bmeeksB 2 Replies Last reply Reply Quote 0
              • bmeeksB
                bmeeks @RickyBaker
                last edited by

                @RickyBaker said in Network becomes totally unusable when my parents connect:

                there is no way they have a statically assigned address in that range.

                That's a pretty bold statement to make unless you actually verified it on each of their devices. The symptoms you described at that time certainly seemed like a duplicate IP problem.

                R 1 Reply Last reply Reply Quote 1
                • bmeeksB
                  bmeeks @RickyBaker
                  last edited by

                  @RickyBaker said in Network becomes totally unusable when my parents connect:

                  I do not remember ever turning this on.

                  It is not enabled out-of-the-box with any pfSense installation. It had to be enabled by you or another admin.

                  B 1 Reply Last reply Reply Quote 0
                  • R
                    RickyBaker @bmeeks
                    last edited by

                    @bmeeks well fair. They'll be back at the beginning of May so I can double confirm but i'm 99% sure. In the meantime i'd love to be able to actually USE my internet, aka fix it before they show up

                    1 Reply Last reply Reply Quote 0
                    • bmeeksB
                      bmeeks @RickyBaker
                      last edited by bmeeks

                      @RickyBaker said in Network becomes totally unusable when my parents connect:

                      I simply don't know what to do and REALLY don't want to reattach all my hundreds of devices again....

                      If you have DHCP configured as you describe, there is nothing to "attach". Simply put them on the wire and let them acquire an IP address from DHCP. I suspect you need to greatly simplify this network of yours. It seems you are trying to be too clever by half and clicking/configuring yourself into non-functionality ...

                      Keep it simple.

                      R 1 Reply Last reply Reply Quote 0
                      • R
                        RickyBaker @bmeeks
                        last edited by RickyBaker

                        @bmeeks said in Network becomes totally unusable when my parents connect:

                        Simply put them on the wire and let them acquire an IP address from DHCP.

                        what do you mean put them on the wire? I would be recreating all the assignments and interfaces/rules. I'm sure I'd do something wrong. But good point, if I leave the SSID the same all the Wifi devices should reconnect eventually....

                        And you are certainly right about the cleverness. I don't know how to fix it so yeah. it's too clever for me....

                        1 Reply Last reply Reply Quote 0
                        • B
                          bp81 @bmeeks
                          last edited by

                          @bmeeks said in Network becomes totally unusable when my parents connect:

                          @RickyBaker said in Network becomes totally unusable when my parents connect:

                          I do not remember ever turning this on.

                          It is not enabled out-of-the-box with any pfSense installation. It had to be enabled by you or another admin.

                          Not in my case. I've seen this enabled by default in recent version of pfSense CE. YMMV, but in any case, as long as OP is not using IPv6 on WAN, there's no reason he can't turn it off.

                          1 Reply Last reply Reply Quote 1
                          • B
                            bp81
                            last edited by bp81

                            I agree with those that say it sounds like a network loop. I'm not sure the Unifi controller will really tell you precisely where the loop is, though it will tell you ports its disabling, which might give you a place to start.

                            If I were troubleshooting this, I'd do two things.

                            1. I would disable mesh functions in the wifi completely.
                            2. I would pull all wiring and reconnect one step at a time. Connect first switch to router, attach wired systems that typically attach to first switch, and test. If all is well, connect second downlink switch, reattach all its clients, and test again. Once all switches are connected, start reconnecting wireless APs and testing as you go. Continue until everything is working, or until something goes sideways.

                            As far as network loops, since you are serving multiple floors, I'd make sure there's not something strange going on like a cat6 cable connecting two wall jacks.

                            Might be worth checking the wiring

                            R 1 Reply Last reply Reply Quote 2
                            • R
                              RickyBaker @bp81
                              last edited by

                              @bp81 well thanks for the suggested steps. One question though. If my non POE switch is what's connected to the pfsense, I would in a sense be testing as many non-wifi devices as possible first? without any APs/WiFi? Then plug in the POE switch and plug one AP at a time in? then other POE devices?

                              1 Reply Last reply Reply Quote 0
                              • P
                                Patch @RickyBaker
                                last edited by Patch

                                @RickyBaker said in Network becomes totally unusable when my parents connect:

                                @Patch said in Network becomes totally unusable when my parents connect:

                                You have a VPN. How is that segmented on your network?

                                Does this have the information you were asking about?

                                Repeating the question does not provide an answer.

                                The reason for VPN segmentation information is I believe it can cause asymmetric routing if not configured appropriately.

                                But I still recommend you find your fault by drastically simplify your network then progressively rebuilding it.

                                Your network verbal description suggests you have some network complexity, so for others to help a network diagram is required. Drawing one would probably also result in you identifying the problem.

                                R 1 Reply Last reply Reply Quote 0
                                • R
                                  RickyBaker @Patch
                                  last edited by RickyBaker

                                  @Patch said in Network becomes totally unusable when my parents connect:

                                  Repeating the question does not provide an answer.

                                  I'm very sorry my screenshot doesn't seem to have loaded:
                                  965fd476-a883-4173-abe7-580ba85a0378-image.png

                                  Yes I'm in front of my rack right now trying to troubleshoot. First I did a speed test on the Wifi and then hardwired to the nonPOE switch and the diffferences were drastic. Perhaps the poor internet I experienced on the hardwired PC was actually due to it being ancient and not the internet. I wouldn't say my laptop directly connected is the snappiest internet experience i've ever had but it's def usable.
                                  7175419b-b380-4776-9901-f2c6ebbf5614-image.png
                                  06db1082-7d5b-4daa-b3f5-164d17c3122f-image.png

                                  So sorry for the red herring. I unplugged everything then slowly started plugging things back in and the previously blocked AP again was blocked due to STP. I even changed the Static IP it's assigned an still blocked. HOWEVER when I switched the port it was plugged into it grabbed a signal and was not blocked. Albeit at a FE speed and not the GbE speeds I was expecting (and a warning about Poor Ethernet Link Speeds)
                                  24c0f32f-e832-45be-8d1c-6d31f4729ede-image.png

                                  I even switched the static IP back to what it was before and it still connected without being blocked. It is only when it's plugged into port 48. i even copied the settings from the port that did work to the one that didn't and still it was blocked by STP. I don't even know if this is the issue, seems like that cable could stand to be reterminated but since I still had issues with it completely unplugged I'm guessing that's not gonna solve my problem. At least I have it actually narrowed down to the WiFi specifically now..

                                  R 1 Reply Last reply Reply Quote 0
                                  • R
                                    RickyBaker @RickyBaker
                                    last edited by

                                    Since it's WiFi should any of these options inside Unifi be enabled or disabled? I disabled the UDP Broadcast Relay that I had painstakingly built inside pfsense to no affect...
                                    75297c2f-6b17-47d4-859c-86a7cfdea93d-image.png

                                    R 1 Reply Last reply Reply Quote 0
                                    • R
                                      RickyBaker @RickyBaker
                                      last edited by

                                      this i gather from googling is quite bad
                                      194d1203-fe0a-4567-b51e-df1b99a3c287-image.png

                                      But i dunno what it's implying or how to fix it. Can anyone point me in the right direction?

                                      johnpozJ 1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator @RickyBaker
                                        last edited by johnpoz

                                        @RickyBaker telling you the response time from your gateway way monitoring is high.. It defaults to 500ms I believe.. which would make sense for what your seeing.. But 500ms is really really high for ping time to your gateway..

                                        You would hope your gateway, ie first device you hit in your isp network that 99.124.237.246 IP should answer more like 10 to say 30ms max... If you were fiber you could see more like 2 or 3ms..

                                        Mine flux between say 10-12ms

                                        wanping.jpg

                                        Could be your saturating your link..

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.7.2, 24.11

                                        R 1 Reply Last reply Reply Quote 0
                                        • R
                                          RickyBaker @johnpoz
                                          last edited by

                                          @johnpoz link saturated as in too much traffic from devices going from the LAN to the Internet? Or both ways? I have att fiber. What would be my next troubleshooting step?

                                          johnpozJ 1 Reply Last reply Reply Quote 0
                                          • stephenw10S
                                            stephenw10 Netgate Administrator
                                            last edited by

                                            Either way could affect it.

                                            But the first thing to do is set the monitoring IP to something remote. The gateway could just be deprioritising ping replies.

                                            https://docs.netgate.com/pfsense/en/latest/routing/gateway-configure.html

                                            R 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.