Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Static Configuration won't work - Ideas where to look?

    Scheduled Pinned Locked Moved Problems Installing or Upgrading pfSense Software
    36 Posts 6 Posters 10.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C Offline
      cmb
      last edited by

      First guess, you don't have a gateway chosen under Interfaces>WAN.

      1 Reply Last reply Reply Quote 0
      • N Offline
        natelabo
        last edited by

        I will get the information for you in just on sec… Just did a complete reinstall...

        1 Reply Last reply Reply Quote 0
        • N Offline
          natelabo
          last edited by

          @wallabybob:

          • ping to name of pfSense box

          • ping to IP address of pfSense LAN IP address

          • ping to www.google.com

          • ping to 8.8.8.8

          C:\Users\nate>ping pfSense.private
          
          Pinging pfSense.private [192.168.0.1] with 32 bytes of data:
          Reply from 192.168.0.1: bytes=32 time<1ms TTL=64
          Reply from 192.168.0.1: bytes=32 time<1ms TTL=64
          Reply from 192.168.0.1: bytes=32 time<1ms TTL=64
          Reply from 192.168.0.1: bytes=32 time<1ms TTL=64
          
          Ping statistics for 192.168.0.1:
              Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
          Approximate round trip times in milli-seconds:
              Minimum = 0ms, Maximum = 0ms, Average = 0ms
          
          C:\Users\nate>ping 192.168.0.1
          
          Pinging 192.168.0.1 with 32 bytes of data:
          Reply from 192.168.0.1: bytes=32 time<1ms TTL=64
          Reply from 192.168.0.1: bytes=32 time<1ms TTL=64
          Reply from 192.168.0.1: bytes=32 time<1ms TTL=64
          Reply from 192.168.0.1: bytes=32 time<1ms TTL=64
          
          Ping statistics for 192.168.0.1:
              Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
          Approximate round trip times in milli-seconds:
              Minimum = 0ms, Maximum = 0ms, Average = 0ms
          
          C:\Users\nate>ping www.google.com
          
          Pinging www.google.com [74.125.225.82] with 32 bytes of data:
          Request timed out.
          Request timed out.
          Request timed out.
          Request timed out.
          
          Ping statistics for 74.125.225.82:
              Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
          
          C:\Users\nate>ping 8.8.8.8
          
          Pinging 8.8.8.8 with 32 bytes of data:
          Request timed out.
          Request timed out.
          Request timed out.
          Request timed out.
          
          Ping statistics for 8.8.8.8:
              Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
          
          
          1 Reply Last reply Reply Quote 0
          • N Offline
            natelabo
            last edited by

            @cmb:

            First guess, you don't have a gateway chosen under Interfaces>WAN.

            WANInterface.png
            WANInterface.png_thumb

            1 Reply Last reply Reply Quote 0
            • P Offline
              phil.davis
              last edited by

              In Services:DHCP Server, Gateway should be blank. Then it will automatically give clients the pfSense LAN address as the gateway.
              (If you have put something like the WAN Gateway address in there, then the clients will have trouble, as they can't directly reach the WAN Gateway address.)

              As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
              If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

              1 Reply Last reply Reply Quote 0
              • N Offline
                natelabo
                last edited by

                @phil.davis:

                In Services:DHCP Server, Gateway should be blank. Then it will automatically give clients the pfSense LAN address as the gateway.
                (If you have put something like the WAN Gateway address in there, then the clients will have trouble, as they can't directly reach the WAN Gateway address.)

                I have not modified any default settings. I have run the setup wizard and changed from DHCP to static configuration on the WAN interface. Nothing else has been changed.

                DHCPServerLANConfig.png
                DHCPServerLANConfig.png_thumb
                DHCPServerWANConfig.png_thumb
                DHCPServerWANConfig.png

                1 Reply Last reply Reply Quote 0
                • N Offline
                  natelabo
                  last edited by

                  I HAVE $25 THAT I WILL PAY TO WHOEVER HELPS ME SOLVES THIS! DESPERATE THIS IS A PRODUCTION MACHINE I HAVE GOT TO GET THIS WORKING

                  1 Reply Last reply Reply Quote 0
                  • W Offline
                    wallabybob
                    last edited by

                    @natelabo:

                    I have run the setup wizard and changed from DHCP to static configuration on the WAN interface. Nothing else has been changed.

                    That would suggest you haven't given a DNS server or a default gateway, both of which are normally supplied by DHCP.

                    Your ISP apparently provides a DHCP server to your WAN interface. Why not use it to get the minimum three configuration items (IP address, IP address of DNS, IP address of default gateway) rather than having to maintain them all yourself?

                    Edit:
                    I just realised @natelabo:

                    changed from DHCP to static configuration

                    might have meant you disabled DHCP server on the WAN interface (for some reason you posted a screen shot showing DHCP server on WAN disabled) but I initially thought you meant you had changed the WAN interface type (on Interfaces -> WAN) from DHCP to Static

                    1 Reply Last reply Reply Quote 0
                    • P Offline
                      phil.davis
                      last edited by

                      Confirm that your client has actually got good settings from DHCP:

                      ipconfig /all

                      Ethernet adapter Local Area Connection:
                      
                         Connection-specific DNS Suffix  . : localdomain
                         Description . . . . . . . . . . . : Intel(R) 82577LC Gigabit Network Connecti
                      on
                         Physical Address. . . . . . . . . : 1C-C1-DE-BC-5D-DC
                         DHCP Enabled. . . . . . . . . . . : Yes
                         Autoconfiguration Enabled . . . . : Yes
                         Link-local IPv6 Address . . . . . : fe80::3062:b201:f6bc:21a7%13(Preferred)
                         IPv4 Address. . . . . . . . . . . : 10.49.46.208(Preferred)
                         Subnet Mask . . . . . . . . . . . : 255.255.255.0
                         Lease Obtained. . . . . . . . . . : Thursday, 4 October 2012 7:09:48 AM
                         Lease Expires . . . . . . . . . . : Thursday, 4 October 2012 10:09:48 AM
                         Default Gateway . . . . . . . . . : 10.49.46.1
                         DHCP Server . . . . . . . . . . . : 10.49.46.1
                         DHCPv6 IAID . . . . . . . . . . . : 287097310
                         DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-15-FE-C3-63-1C-C1-DE-BC-5D-DC
                      
                         DNS Servers . . . . . . . . . . . : 10.49.46.1
                         NetBIOS over Tcpip. . . . . . . . : Enabled
                      
                      

                      The client interface in use should normally have Default Gateway, DHCP Server and DNS Servers all with the same IP address of the pfSense router, in a simple LAN with 1 router network.
                      Then try:

                      tracert 8.8.8.8
                      The first hop reported should be the IP address of your pfSense router, then the gateway of your ISP, then off to lots of hops in Internet-land.

                      As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                      If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                      1 Reply Last reply Reply Quote 0
                      • N Offline
                        natelabo
                        last edited by

                        @wallabybob:

                        That would suggest you haven't given a DNS server or a default gateway, both of which are normally supplied by DHCP.

                        Your ISP apparently provides a DHCP server to your WAN interface. Why not use it to get the minimum three configuration items (IP address, IP address of DNS, IP address of default gateway) rather than having to maintain them all yourself?

                        I setup DNS servers in the setup wizard they also appear in the general settings. I set up the default gateway in the static setup portion of the setup wizard. The router is an SMC8014 for use on comcast biz class service. DHCP is offered but you can't access the static IP's. To bind the firewall to a static IP you must manually setup and the router passes it through.

                        @wallabybob:

                        might have meant you disabled DHCP server on the WAN interface (for some reason you posted a screen shot showing DHCP server on WAN disabled) but I initially thought you meant you had changed the WAN interface type (on Interfaces -> WAN) from DHCP to Static

                        I'm confused I did mean that I swapped Interfaces->WAN from DHCP to Static. But in my Services: DHCP Server the "Enable DHCP Service on WAN Interface" is unchecked. DHCP service is enabled on the LAN interface. Is DHCP supposed to be setup on the WAN interface?

                        1 Reply Last reply Reply Quote 0
                        • N Offline
                          natelabo
                          last edited by

                          @phil.davis:

                          Confirm that your client has actually got good settings from DHCP:

                          ipconfig /all

                          Ethernet adapter Local Area Connection:
                          
                             Connection-specific DNS Suffix  . : private
                             Description . . . . . . . . . . . : Realtek PCIe GBE Family Controller
                             Physical Address. . . . . . . . . : 00-24-BE-DD-03-F2
                             DHCP Enabled. . . . . . . . . . . : Yes
                             Autoconfiguration Enabled . . . . : Yes
                             Link-local IPv6 Address . . . . . : fe80::19cd:97cd:fe09:94ac%13(Preferred)
                             IPv4 Address. . . . . . . . . . . : 192.168.0.200(Preferred)
                             Subnet Mask . . . . . . . . . . . : 255.255.255.0
                             Lease Obtained. . . . . . . . . . : Wednesday, October 03, 2012 11:26:01 PM
                             Lease Expires . . . . . . . . . . : Thursday, October 04, 2012 1:40:55 AM
                             Default Gateway . . . . . . . . . : 192.168.0.1
                             DHCP Server . . . . . . . . . . . : 192.168.0.1
                             DHCPv6 IAID . . . . . . . . . . . : 285222078
                             DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-15-CA-22-B3-00-24-BE-DD-03-F2
                          
                             DNS Servers . . . . . . . . . . . : 192.168.0.1
                             NetBIOS over Tcpip. . . . . . . . : Enabled
                          
                          
                          1 Reply Last reply Reply Quote 0
                          • N Offline
                            natelabo
                            last edited by

                            @phil.davis:

                            Then try:

                            tracert 8.8.8.8
                            The first hop reported should be the IP address of your pfSense router, then the gateway of your ISP, then off to lots of hops in Internet-land.

                            C:\Users\nate>tracert 8.8.8.8
                            
                            Tracing route to google-public-dns-a.google.com [8.8.8.8]
                            over a maximum of 30 hops:
                            
                              1     2 ms    <1 ms    <1 ms  pfsense.private [192.168.0.1]
                              2     *        *        *     Request timed out.
                              3     *        *        *     Request timed out.
                              4     *        *        *     Request timed out.
                              5     *        *        *     Request timed out.
                              6     *        *        *     Request timed out.
                              7     *        *        *     Request timed out.
                              8     *        *        *     Request timed out.
                              9     *        *        *     Request timed out.
                             10     *        *        *     Request timed out.
                             11     *        *        *     Request timed out.
                             12     *        *        *     Request timed out.
                             13  ^C
                            
                            1 Reply Last reply Reply Quote 0
                            • chpalmerC Offline
                              chpalmer
                              last edited by

                              I can't believe that Comcast is putting that modem in true bridge mode for you.

                              When you set up your WAN for DHCP what address does it get?

                              Triggering snowflakes one by one..
                              Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                              1 Reply Last reply Reply Quote 0
                              • P Offline
                                phil.davis
                                last edited by

                                I'm confused I did mean that I swapped Interfaces->WAN from DHCP to Static. But in my Services: DHCP Server the "Enable DHCP Service on WAN Interface" is unchecked. DHCP service is enabled on the LAN interface. Is DHCP supposed to be setup on the WAN interface?

                                That is correct. The pfSense DHCP Server is enabled on LAN, to give DHCP to the LAN clients (your PC etc). The WAN has a DHCP client only, which asks for DHCP network settings from a DHCP Server that your ISP provides.
                                Your LAN client PC network settings look fine - it goes to your pfSense for all network stuff - gateway, DHCP and DNS.
                                The traceroute goes to your pfSense then after that goes nowhere, presumably pfSense does not have a useful/valid default route.
                                The issue is presumably somewhere in getting useful DHCP settings on WAN from the ISP DHCP server.
                                What does Status:Interfaces show for WAN?
                                What does Diagnostics:Routes show for the default route?

                                As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                                If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                                1 Reply Last reply Reply Quote 0
                                • N Offline
                                  natelabo
                                  last edited by

                                  @chpalmer:

                                  I can't believe that Comcast is putting that modem in true bridge mode for you.

                                  When you set up your WAN for DHCP what address does it get?

                                  I'm a little confused I have tested this setup with a 2 low grade routers. Both routers can access WAN through the assigned Static IP and pass the connection to internal LAN. It is definately something with the pf box. It is not passing the packets? to the LAN.

                                  The SMC box by default is setup to apply 10.1.10.X addresses to hardware that is looking for DHCP. When I use DHCP on the pf box it receives a DHCP address of 10.1.10.X and a gateway address of 10.1.10.1. WAN works on anything given a DHCP address on the internal LAN from the pf box. It just won't pass when configured with a Static IP.

                                  1 Reply Last reply Reply Quote 0
                                  • chpalmerC Offline
                                    chpalmer
                                    last edited by

                                    Comcast business does not allow static ips past the gateway device in the same manner as many other ISP's do.  Ive fought with them over this in the past. The only true bridge modem they will allow is a Motorola 6000 series and they wont let you use it if you have a static IP address.

                                    I believe in order to use your static IP your gonna need to leave the primary WAN as DHCP and use a VIP for the static.  I wont use Comcast anywhere I need a static and have been lucky enough so far to have another solution available at those locations.

                                    Did Comcast tech support provide you with instructions or any kind of direction?

                                    If you set the WAN of any of your other routers up as DHCP they get a 10.x.x.x address, correct?

                                    Unless Comcast has changed things in the last 6 mos. this is the way they do things.

                                    Triggering snowflakes one by one..
                                    Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                    1 Reply Last reply Reply Quote 0
                                    • N Offline
                                      natelabo
                                      last edited by

                                      @phil.davis:

                                      The traceroute goes to your pfSense then after that goes nowhere, presumably pfSense does not have a useful/valid default route.
                                      The issue is presumably somewhere in getting useful DHCP settings on WAN from the ISP DHCP server.
                                      What does Status:Interfaces show for WAN?
                                      What does Diagnostics:Routes show for the default route?

                                      InterfacesStatus.png
                                      InterfacesStatus.png_thumb
                                      DiagnosticsRouting.png
                                      DiagnosticsRouting.png_thumb

                                      1 Reply Last reply Reply Quote 0
                                      • N Offline
                                        natelabo
                                        last edited by

                                        Okay just noticed this…

                                        Gateway Status: Offline

                                        StatusGateways.png_thumb
                                        StatusGateways.png

                                        1 Reply Last reply Reply Quote 0
                                        • chpalmerC Offline
                                          chpalmer
                                          last edited by

                                          http://www.dslreports.com/forum/r23503059-Business-Comcast-Business-gateway-bridge-mode-forwarding-iss

                                          And there might be more here…

                                          http://www.dslreports.com/nsearch?boardlist=141&cat=remark&advanced=1&141=1&p=10&o=r&q=SMC8014+static

                                          Triggering snowflakes one by one..
                                          Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                          1 Reply Last reply Reply Quote 0
                                          • chpalmerC Offline
                                            chpalmer
                                            last edited by

                                            This one caught my eye.

                                            http://www.dslreports.com/forum/remark,25742306?hilite=smc8014+static

                                            Triggering snowflakes one by one..
                                            Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.