The link state of an interface (bridge member) goes up/down continuously
-
Thanks Steve.
I'll try it. Some others tried the system patches feature. I guess that's the way to do it. There I go re-inventing the wheel again. -
The official fix works for the msk driver. I like the system patch tool. It lets you use your own patches or official github links.
-
@/CS:
Try this fix:
https://github.com/pfsense/pfsense/commit/f3a4601c85c4de78caa4f12fefd64067fd83dbe8It seems to only affect certain NICs that bounce their link on some configuration operations.
Many thanks jimp! It works fine for me. ;D
Please pardon my ignorance, but how do I apply this fix?
Do I just replace my existing /etc/rc.newwanip with this file?
-
Please pardon my ignorance, but how do I apply this fix?
Do I just replace my existing /etc/rc.newwanip with this file?
So, I just tried doing this, rebooted the pfSense box, but my devices keep going up and down.
My configuration is an AMD E350 board with two Intel Pro/1000 dual NIC's and the on board Realtek 8111C junk.
Any thoughts?
-
I added the 4 highlighted lines to my existing file.
Otherwise you could chance it and gitsync…
-
Please pardon my ignorance, but how do I apply this fix?
Do I just replace my existing /etc/rc.newwanip with this file?
So, I just tried doing this, rebooted the pfSense box, but my devices keep going up and down.
My configuration is an AMD E350 board with two Intel Pro/1000 dual NIC's and the on board Realtek 8111C junk.
Any thoughts?
So, making these changes to /etc/rc.newwanip did not fix the problem on it's own, but then I decided to try to just disable the onboard ethernet (Realtek 8111C) and that actually did the trick. They are no longer cycling for me.
I left the Realtek interface on just as an extra port in case I ever needed it, not something to rely on, as I know they are garbage, but I hadn't considered that it could interfere with the proper working of my good NIC's
Thanks for the help folks.
-
Just for reference using the system patches package takes away the possibility of typo errors. You just enter the commit number and everything is done for you.
Steve
-
Thought I'd report back that this worked for me too.
I have another bridge of fxp(4) NICs that didn't have that problem so as you say it's not all NICs that are affected.First chance I've had to try the System Patches package. Nice. :)
Steve
I have an issue that has almost the same symptoms with Sun hardware part 501-5406-07. I know there has to be hundreds of units out there with this hardware in them. I have personally built about 25 units with this quad fast Ethernet card. I tried to submit it to Redmine but it was rejected. I can fix it myself but I was wondering if it should be fixed in the pfSense code or in the hme driver. Also, being new at reporting bugs, I am curious if I should try to contact the author of the driver if Redmine rejects it? It is a real bug in my opinion. I am a little surprised I haven't heard any one else complaining. Here is the Redmine issue with the reject by Chris Buechler. https://redmine.pfsense.org/issues/3373
It defines the issue. -
Sounds exactly like this thread: http://forum.pfsense.org/index.php/topic,69125.15.html
Unfortunately that wasn't really resolved usefully in my opinion.Steve
-
If you are using the system patches package make sure that not only you get patch 58ee84b4b2f9daba87e44abf663026c6266a7cd8 but also 793299b8f5bdc0fd167093cc5ab9f3f30f0d77ac
Both could be relevant to similar issues, but it would still only apply for interfaces that were set to an IP type of "none" (typically bridged interfaces)
-
I would like to chime in and also confirm this fix worked for me.
I am using a Soekris Net6501-50 with the Intel 82574L 4 port Gigabit Ethernet card. I experienced the same issue with an interface configured into a bridge group bouncing continuously when connecting a device and establishing link. This patch worked for me.
I applied it using the System Patch package. For anyone who is unfamiliar with it, it's pretty easy. Install the "System Patch" package, and then under the Patches screen, add the link from jimp. Fetch the patch, test it (making sure it doesn't have any issues applying), and then apply the patch. It seemed to work without rebooting, but I did anyway just for good measure.
Thanks for those who contributed to this thread and thanks to jimp for the fix!
-
I have a bridged setting (WAN - DMZ) on a asus server rs300-e7 with 4 NIC. i have done this patch https://github.com/pfsense/pfsense/commit/f3a4601c85c4de78caa4f12fefd64067fd83dbe8
unfortunatly i still recieve a lot of time outs on every server behind the DMZ.
the first rule in the WAN is Allow ICMP from all to all. Are there any options which i can test?
p.s. it looks like the more data is beeing processed by pfsense the more time outs it gets…. all loggings are out on the rules. pftop is showing ok status
-
i am almost certain that if there are more connections through the pfsense firewall the more time outs we get, the server hardware is 3 years old with 32GB of ram… states counts is now 6125 and a recieve some pings traffic in is 1MB traffic out is 3MB ..
-
Where are yoy seeing these 'timeouts'?
Steve
-
when i ping to servers behind the pfsense firewall. ( i have now 2 servers behind that)
the pfsense box itselfs does not give time out, when i ping to other servers (not behind the pfsense ) no time out occurs.
I have also got a server, when i put this behind the pfsense firewall ping time outs occurrs , and when i put it back behind the sonicwall firewall no ping time out occurs
Like i said, the more traffic over the pfsense the more time out occurs…. the hardware should not be a problem:
24GB memory Intel Xeon 3470 Raid 4x 1TB raid 10
When ping time outs also apache etc is connecting
-
That doesn't sound like the interface flapping problem described in this thread. Are you seeing the interface going up and down in the logs?
Steve
-
I had that until i did:
https://github.com/pfsense/pfsense/commit/f3a4601c85c4de78caa4f12fefd64067fd83dbe8
now i dont have that anymore but still the ping time outs when more traffic comes over the firewall
-
The lan cards in the asus server are Intel
82574L known issues with that type of LAN? -
No the 82574L is well tested and widely used.
I think this is probably unrelated to the bridge issue, maybe start a new thread.
Interestingly I see that JimP has actually posted three patches for this issue:
Initially:
https://github.com/pfsense/pfsense/commit/f3a4601c85c4de78caa4f12fefd64067fd83dbe8and then:
https://github.com/pfsense/pfsense/commit/58ee84b4b2f9daba87e44abf663026c6266a7cd8
and
https://github.com/pfsense/pfsense/commit/793299b8f5bdc0fd167093cc5ab9f3f30f0d77acHave you done this?:
https://doc.pfsense.org/index.php/Tuning_and_Troubleshooting_Network_Cards#Intel_igb.284.29_and_em.284.29_CardsSteve
-
Thank you Stephan for youre time !
I will check those links out and will publish the result.
