Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Help on load balancing arplookup 210.213.215.254 failed: host is not on local ne

    Scheduled Pinned Locked Moved Routing and Multi WAN
    48 Posts 11 Posters 24.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      hoba
      last edited by

      @sai:

      dotdash

      @dotdash:

      wan 100.200.200.110
      subnet mask 255.255.255.255
      gateway 100.200.200.254

      Its a bit early in the morning here, but your subnet mask looks way wrong. The WAN and its gateway should be on the same subnet, so try a subnet of 255.255.255.0

      No, pppoe just works this way.

      1 Reply Last reply Reply Quote 0
      • C
        cheeky
        last edited by

        @hoba
        Still waiting for the final resolution to this problem, i'm still using now the original 1.0.1 with no problem.
        Thank you very much.
        :D ;D ::)

        1 Reply Last reply Reply Quote 0
        • N
          ndelong
          last edited by

          If it helps, I'm in a similar situation (fail-over not working due to arp messages):

          WAN1: PPPoE w/"static" DHCP /32
          WAN2: Static

          Running 1.0.1-SNAPSHOT-03-08-2007

          Getting these messages:

          
          kernel: arplookup 204.213.240.xxx failed: host is not on local network
          kernel: arpresolve: can't allocate route for 204.213.240.xxx
          
          

          Anything I can do to help? Send logs, etc?

          1 Reply Last reply Reply Quote 0
          • S
            sullrich
            last edited by

            Try adding static routes for these hosts or check the routing table to ensure they are correct.

            netstat -rn

            Also I recall LB not working with pppoe but I could be wrong here.

            1 Reply Last reply Reply Quote 0
            • D
              databeestje
              last edited by

              that would be a yes
              I think we add a route for the gateway on the underlying interface instead of the ng0 device.

              Which would result in this iirc.

              1 Reply Last reply Reply Quote 0
              • N
                ndelong
                last edited by

                Our firewall started off with PPPoE on the WAN interface connected to an old Westel modem. We added a cable connection w/static IP months later and are currently testing LB/FO. Both connections work fine independently of each other - even with the load balancing pools created. As soon as we create any rules on the LAN interface that reference the LB or FO gateways, we get intermittent connectivity and those arp messages. Unfortunately, I'm not on that customer's site, so my netstat -rn is shows the routes with LB/FO rules disabled:

                
                Destination        Gateway            Flags    Refs      Use  Netif Expire
                default            204.213.240.129    UGS         0  7510236    ng0
                74.92.60.116/30    link#4             UC          0        0    em3
                74.92.60.118       00:13:f7:22:ae:b0  UHLW        1   432194    em3   1043
                127.0.0.1          127.0.0.1          UH          0        0    lo0
                192.168.1          link#3             UC          0     3236    em2
                204.213.240.253    lo0                UHS         0        0    lo0
                
                

                Would a temporary workaround be to connect the Westel modem to a Linksys router (to handle the PPPoE) and configure static RFC1918 IP's between the pfSense box and the Linksys?

                1 Reply Last reply Reply Quote 0
                • dotdashD
                  dotdash
                  last edited by

                  A similar situation was discussed here: http://forum.pfsense.org/index.php/topic,4100.0.html
                  Quick summary:
                  You could use 1.0.1 release and PPPoE on pfSense's WAN.
                  You could double nat, but that sucks.
                  If you have multiple publics (static block), have a router (another pfSense with LAN bridged to WAN??) do the PPPoE and configure pfSense with a straight public IP.

                  1 Reply Last reply Reply Quote 0
                  • D
                    databeestje
                    last edited by

                    Setup a modem with pppoe bridging so you can just use dhcp or static with a public ip on the pfsense box.

                    Still have not found time to troubleshoot this.

                    1 Reply Last reply Reply Quote 0
                    • N
                      ndelong
                      last edited by

                      My main issue with reverting back to straight 1.0.1 is that the traffic I need to handle requires FO rather than LB. The traffic is such that if the recipient detects even one packet coming from a different source IP, they'll can the entire connection.

                      At a different site I have a Westell 6100 modem/router that appears to handle the pppoe & pass the static info on to the pfsense box. I'm going to see if I can replicate that configuration at this particular site.

                      databeestje - If you don't have time to troubleshoot, keep tossing ideas my way & I'll do my best to see what information I can gather for you. It would be awesome if we can get native PPPoE + Cable LB/FO working - poorman's enterprise!

                      1 Reply Last reply Reply Quote 0
                      • D
                        databeestje
                        last edited by

                        as of 22-03-2007 pppoe is still not supported/fixed.

                        Considering my vacation next week this is unlikely to change soon.

                        You can however use the old style configuration as a workaround. e.g. Not the interface name, but the gateway address. This requires manual config mangling and a filter reload.
                        so replace "wan" with you wan gateway IP in the relevant config section, etc. Please confirm that works with a pppoe connection before we troubleshoot this any further.

                        e.g. edit file config.xml, search for the load balancer section. Gateway goes left, monitor ip goes right.
                        Save that, reboot, see if it works.

                        Old style configuration will trigger some logging warnings though.

                        1 Reply Last reply Reply Quote 0
                        • C
                          cheeky
                          last edited by

                          Have tested using the above procedure, duan wan load balancing now working using PPPOE account in WAN.
                          ;D ;D ;D

                          1 Reply Last reply Reply Quote 0
                          • D
                            databeestje
                            last edited by

                            i'm one week further now. And i have a hunch.

                            Can you give me the contents of /var/etc/slbd.conf for the working and the non working configuration?

                            You will also need to clarify the ip configuration. E.g. which IP is the local address, which is the gateway and which is the monitor ip.

                            This would really help tracking this problem down, thank you.

                            1 Reply Last reply Reply Quote 0
                            • R
                              rafael.cardoso
                              last edited by

                              databeestje, load balance with ppoe works now?
                              Thank you!

                              Respect is Everything!

                              1 Reply Last reply Reply Quote 0
                              • D
                                databeestje
                                last edited by

                                Not untill Mr Cheeky or someone else with a not working pppoe config sends me the items I specified in my previous post.

                                I lack a broken PPPoE connection to test this. Because I have tested this with one connection I had access too and it just worked.

                                1 Reply Last reply Reply Quote 0
                                • T
                                  techatdd
                                  last edited by

                                  @databeestje:

                                  Not untill Mr Cheeky or someone else with a not working pppoe config sends me the items I specified in my previous post.

                                  I lack a broken PPPoE connection to test this. Because I have tested this with one connection I had access too and it just worked.

                                  I have the same issue.
                                  Can you please give me the exactly way for the work around. I will provide you with the informations you needed then.

                                  1 Reply Last reply Reply Quote 0
                                  • T
                                    techatdd
                                    last edited by

                                    @techatdd:

                                    @databeestje:

                                    Not untill Mr Cheeky or someone else with a not working pppoe config sends me the items I specified in my previous post.

                                    I lack a broken PPPoE connection to test this. Because I have tested this with one connection I had access too and it just worked.

                                    I have the same issue.
                                    Can you please give me the exactly way for the work around. I will provide you with the informations you needed then.

                                    I just read the other post: http://forum.pfsense.org/index.php/topic,4542.0.html
                                    Is this already fixed?

                                    1 Reply Last reply Reply Quote 0
                                    • C
                                      cheeky
                                      last edited by

                                      This problem still exist using the latest 1.2 snapshots.
                                      You have to manually edit the lood balancing pools (replace wan, opt1, etc with the real ip address of the gateway. :( :( :(

                                      1 Reply Last reply Reply Quote 0
                                      • S
                                        sullrich
                                        last edited by

                                        LB works fine now with PPPoE.

                                        1 Reply Last reply Reply Quote 0
                                        • C
                                          cheeky
                                          last edited by

                                          Have tried the latest ISO of Pfsense-Beta-1-testing, this problem on LB using PPPOE on WAN still exist. Using the WAN gateway as a default gateway (single gateway), no problem. But if you include it on any pool that is LB or failover, error appears.
                                          Again, manually editing the pools replacing WAN with the real IP corrects the problem.

                                          1 Reply Last reply Reply Quote 0
                                          • R
                                            RyanB
                                            last edited by

                                            @databeestje:

                                            i'm one week further now. And i have a hunch.

                                            Can you give me the contents of /var/etc/slbd.conf for the working and the non working configuration?

                                            You will also need to clarify the ip configuration. E.g. which IP is the local address, which is the gateway and which is the monitor ip.

                                            This would really help tracking this problem down, thank you.

                                            I'm experiencing this exact same problem, I was running 1.0.1 on a machine whose motherboard died.  We purchased a replacement and I did a fresh install of the 3-27-07 snapshot where we ran in to this problem, last night I updated to the 1.2-BETA-1-TESTING-SNAPSHOT-04-30-07 to find the issue still exists.

                                            /var/etc/slbd.conf from the working 1.0.1 install:

                                            Balancer|Dual Wan:
                                                          :vip=127.0.0.1:
                                                          :vip-port=666:
                                                          :sitedown=127.0.0.1:
                                                          :sitedown-port=666:
                                                          :service-port=666:
                                                          :method=round-robin:
                                                          :services=2:
                                                          :0=72.14.203.99:
                                                          :1=216.239.37.99:
                                                          :ping:

                                            /var/etc/slbd.conf from the non-working 1.2-BETA-1-TESTING-SNAPSHOT-04-30-07 install.

                                            Wan1BalanceWan2|Load Balance Wan1 & Wan2:
                                                    :poolname=Wan1BalanceWan2:
                                                    :vip=127.0.0.1:
                                                    :vip-port=666:
                                                    :sitedown=127.0.0.1:
                                                    :sitedown-port=666:
                                                    :service-port=666:
                                                    :method=round-robin:
                                                    :services=2:
                                                    :0=207.225.140.205:
                                                    :1=75.144.37.222:
                                                    :ping:

                                            In the 1.0.1 install I was using 2 addresses that resolved from www.google.com, in the 4-30-07 install they are the default gateways for each connection.

                                            I'm not sure how much this will help, but the load balance section of config.xml for 1.0.1 is

                                            <lbpool><type>gateway</type>
                                                                    <monitorip>216.239.37.99 <monitorip><name>Balancer</name>
                                                                    <desc>Dual WAN</desc>
                                                                    <port><servers>207.225.140.205|216.239.37.99</servers>
                                                                    <servers>75.144.37.222|72.14.203.99</servers></port></monitorip></monitorip></lbpool>

                                            In the non-working snapshot config.xml the load balance section is as follows

                                            <lbpool><type>gateway</type>
                                                                    <behaviour>balance</behaviour>
                                                                    <monitorip><name>Wan1BalanceWan2</name>
                                                                    <desc>Load Balance Wan1 & Wan2</desc>
                                                                    <port><servers>wan|207.225.140.205</servers>
                                                                    <servers>opt1|75.144.37.222</servers></port></monitorip></lbpool>

                                            If there's any other information I can provide to help resolve this, please let me know.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.