Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Network becomes totally unusable when my parents connect

    Scheduled Pinned Locked Moved General pfSense Questions
    88 Posts 10 Posters 5.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      RickyBaker @RickyBaker
      last edited by

      Since it's WiFi should any of these options inside Unifi be enabled or disabled? I disabled the UDP Broadcast Relay that I had painstakingly built inside pfsense to no affect...
      75297c2f-6b17-47d4-859c-86a7cfdea93d-image.png

      R 1 Reply Last reply Reply Quote 0
      • R
        RickyBaker @RickyBaker
        last edited by

        this i gather from googling is quite bad
        194d1203-fe0a-4567-b51e-df1b99a3c287-image.png

        But i dunno what it's implying or how to fix it. Can anyone point me in the right direction?

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @RickyBaker
          last edited by johnpoz

          @RickyBaker telling you the response time from your gateway way monitoring is high.. It defaults to 500ms I believe.. which would make sense for what your seeing.. But 500ms is really really high for ping time to your gateway..

          You would hope your gateway, ie first device you hit in your isp network that 99.124.237.246 IP should answer more like 10 to say 30ms max... If you were fiber you could see more like 2 or 3ms..

          Mine flux between say 10-12ms

          wanping.jpg

          Could be your saturating your link..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          R 1 Reply Last reply Reply Quote 0
          • R
            RickyBaker @johnpoz
            last edited by

            @johnpoz link saturated as in too much traffic from devices going from the LAN to the Internet? Or both ways? I have att fiber. What would be my next troubleshooting step?

            johnpozJ 1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Either way could affect it.

              But the first thing to do is set the monitoring IP to something remote. The gateway could just be deprioritising ping replies.

              https://docs.netgate.com/pfsense/en/latest/routing/gateway-configure.html

              R 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @RickyBaker
                last edited by johnpoz

                @RickyBaker well normally the upload would be what would kill the latency to your gateway..

                I would look to see how much traffic your sending in pfsense traffic graphs.. I would think your connection would have to be just utterly pegged to cause that kind of latency.

                You're on fiber - normally those response times from your ISPs are way way low - like few ms only so seeing plus 500ms is insane. And normally fiber has nice fat pipe, like gig/gig - while I am stuck on shitty cable with 500/50 --

                And this only happens when your parents device(s) connect? What is your normal latency show when network is working normal.. You can look in monitoring for that.

                Or should show just on your gateway widget..

                Example I currently have like 6 people streaming off my plex, on my 50Mbps up connection using like 40Mbps or so, etc.. And it put a hurt on my normally 10-12ms ping times to my gateway

                latency.jpg

                edit: and yeah Steve is right you should see if its just your gateway being shitty and not answering you very fast - you could try some other IP on the internet, say 8.8.8.8 for example if your connection is not saturated.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                M 1 Reply Last reply Reply Quote 0
                • M
                  michmoor LAYER 8 Rebel Alliance @johnpoz
                  last edited by

                  @johnpoz said in Network becomes totally unusable when my parents connect:

                  o

                  That 4680 is still going strong....

                  Firewall: NetGate,Palo Alto-VM,Juniper SRX
                  Routing: Juniper, Arista, Cisco
                  Switching: Juniper, Arista, Cisco
                  Wireless: Unifi, Aruba IAP
                  JNCIP,CCNP Enterprise

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator @michmoor
                    last edited by johnpoz

                    @michmoor so your not seeing any real traffic on your wan in either direction, and your still seeing 500ms logs... Or currently your not seeing those events?

                    Yeah 4860 - great box! rocks for anything would ever need with my 500/50 connection that is for damn sure.. Wish I could put it through its paces with gig/gig ;) but just no option for me available. It never really even breaks a sweat for me..

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    M 1 Reply Last reply Reply Quote 0
                    • M
                      michmoor LAYER 8 Rebel Alliance @johnpoz
                      last edited by

                      @johnpoz said in Network becomes totally unusable when my parents connect:

                      @michmoor so your not seeing any real traffic on your wan in either direction, and your still seeing 500ms logs... Or currently your not seeing those events?

                      Yeah 4860 - great box! rocks for anything would ever need with my 500/50 connection that is for damn sure.. Wish I could put it through its paces with gig/gig ;) but just no option for me available. It never really even breaks a sweat for me..

                      Didn’t mean to taint the thread. Your question is to the OP.

                      But yeah that 4680 is an amazing little device. How long have you had it?
                      As an aside I got a 1100 at my mom’s place and that’s just so impressive. No fuss. Handles 300/25Mbps with easiness

                      Firewall: NetGate,Palo Alto-VM,Juniper SRX
                      Routing: Juniper, Arista, Cisco
                      Switching: Juniper, Arista, Cisco
                      Wireless: Unifi, Aruba IAP
                      JNCIP,CCNP Enterprise

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @michmoor
                        last edited by johnpoz

                        @michmoor its getting a bit long in the tooth.. Sometime round end of 2017, early 2018..

                        edit: found this old post, pictures must of gotten lost in one of the previous forum updates, but here is post when I got it

                        https://forum.netgate.com/post/740935

                        So would been right around 12/13/2017 ;)

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 1
                        • R
                          RickyBaker @stephenw10
                          last edited by

                          @stephenw10
                          Changed the Monitoring ip to the google name servers, I see this in the log and no more alarms but maybe it just hasn't tested it yet? or maybe it just hasn't failed yet

                          fe01057b-f75e-4fd7-8c7e-44b7fa6501bc-image.png

                          I pulled up that Gateways widget an when it first loaded I had a big red warning about the gateway but that changed to Online pretty quick. I'm gonna let the monitoring IP stay 8.8.8.8 for a little bit to see what's up but then i'll change it back and see what we got

                          4c505a50-e692-4850-925d-855dd92460bf-image.png

                          @johnpoz said in Network becomes totally unusable when my parents connect:

                          Mine flux between say 10-12ms

                          I didn't know how to add that graph, any tips would be appreciated.

                          On another front I called AT&T and just complained and they are sending me a new router tomorrow, as mine was 5+ years old and they seemed unwilling to troubleshoot with me until it's replaced....

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @RickyBaker
                            last edited by

                            @RickyBaker had you just changed it when you took that widget screenshot - because 50ms with a SD of 140ms is insane to google

                            Which graph - monitoring, just pick the stuff you want to see.. for traffic just go to traffic graph - both under status tab.

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            R 1 Reply Last reply Reply Quote 0
                            • R
                              RickyBaker @johnpoz
                              last edited by

                              @johnpoz the one in this post: https://forum.netgate.com/post/1212585

                              i'll explore the status tab further, I was thinking it was a widget you add to the homepage

                              Possible non-sequitur but i ran across this post as I was trying to google how best to set up my new ATT modem/ONT (BGW320-500)
                              https://docs.netgate.com/pfsense/en/latest/recipes/authbridge.html

                              and I remember this! when i first set up my router, but eventually had an IT guy from my work set it up for me. The top 2 use-cases it mentions are:

                              Modem Memory Limitations
                              The fiber modem may still track states even in IP-Passthrough mode. Some modems have a hard limit on the number of states that they can handle at a time, becoming unstable under significant load.

                              Limitations in IPv6 Implementation
                              In IP-Passthrough mode the modem is usually provisioned with an IPv6 prefix (/60 for AT&T, for example), but will only hand out a single /64 prefix out of the larger allocation via DHCP-PD to the firewall. This means that only a single LAN on the firewall can be provisioned with IPv6 by default. It is possible to request multiple /64 networks out of the IPv6 prefix block, but that is an ugly workaround.

                              Both of these seem like they could manifest as the weird IP6/DNS ghosts I was/am experiencing. I also noticed that my Current Modem isn't in IP Passthrough mode, which I simply don't understand. I remember earlier in this tread i couldn't understand why Track Interface selection under IPv7 Configuration Type of the LAN. It HAD to come from this....

                              Also should be noted that despite this supposed to be to remove the Modem from the loop, my modem was very much attached.

                              R 1 Reply Last reply Reply Quote 0
                              • R
                                RickyBaker @RickyBaker
                                last edited by RickyBaker

                                @RickyBaker I think it was the modem!!!
                                680decb1-9933-4198-9eee-eb55e04c7910-image.png

                                I'm not convinced this isn't just temporary. Some of the settings of the Modem seem wrong. for one passthrough didn't seem to work and DHCP is enabled on the router. I'd like to enable the protocol in that link i posted above (https://docs.netgate.com/pfsense/en/latest/recipes/authbridge.html) but for the time being i'm happy to have snappy internet back! Thanks everyone!

                                This seems......ok? not sure what I should expect over wifi with gigabit fiber:

                                f8a26daf-94ec-416e-a4cc-bfab1911feec-image.png

                                It's def faster than it was though...

                                1 Reply Last reply Reply Quote 0
                                • R RickyBaker referenced this topic on
                                • First post
                                  Last post
                                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.