Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Static IP on WAN results in no connectivity

    Scheduled Pinned Locked Moved General pfSense Questions
    17 Posts 6 Posters 1.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by johnpoz

      post up a picture of

      System / Routing / Gateways
      

      it not going to work if you do not have a gateway set on your wan..

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      D 1 Reply Last reply Reply Quote 0
      • D
        dominicm @johnpoz
        last edited by

        @johnpoz

        It's literally only one entry I added (this is a clean pfsense install):

        Sky (default)	WAN	192.168.2.1	192.168.2.1
        

        Both "Sky" and "None" seems to work in WAN settings.

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          that is your default route - so yeah its going to work with that.. its your "default"

          If you remove that then no its not going to work..

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          D 1 Reply Last reply Reply Quote 0
          • JKnottJ
            JKnott @dominicm
            last edited by

            @dominicm said in Static IP on WAN results in no connectivity:

            Why is it default if it's the wrong setting?

            A /32 is used to denote a specific address. On a network, you need at least 2 devices to be useful. That means a mask no longer than a /31, as might be used on point to point links. You need at least as many addresses as possible devices, which is why we often see /24 on local networks. That provides room for 256 addresses, of which 254 are usable.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            D 1 Reply Last reply Reply Quote 0
            • D
              dominicm @johnpoz
              last edited by

              @johnpoz said in Static IP on WAN results in no connectivity:

              that is your default route - so yeah its going to work with that.. its your "default"

              If you remove that then no its not going to work..

              I did think that default might do that so I tried disabling it before I posted and it's still working fine. It looks like it didn't apply until I rebooted after an update. I only got connectivity back after I enabled the gateway and set it in WAN page.

              1 Reply Last reply Reply Quote 0
              • D
                dominicm @JKnott
                last edited by

                @jknott

                From what you said it seems like /32 would never be usable in WAN settings so why would it be the default I do not understand. I would expect a default to be the most common config or something similar.

                DerelictD 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by johnpoz

                  Its the end of the the dropdown list nothing more.. ANYONE setting a static IP should KNOW what the mask means - or they shouldn't be freaking setting it static in the first place. Or they would be following directions given to them with what mask to use..

                  And /32 for sure could be used in some configurations.. Where the gateway is different L3 network, but same L2.. So yeah it does have viable setups where it would and could be used. But those are not very common.

                  Why does my TV when it turn on default to channel 3, there is nothing on channel 3 in my area - is the same sort of question your asking about why does it default to /32

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • DerelictD
                    Derelict LAYER 8 Netgate @dominicm
                    last edited by

                    @dominicm

                    @dominicm said in Static IP on WAN results in no connectivity:

                    Where did you set gateway to none?

                    Wan interface -> Static IPv4 Configuration -> IPv4 Upstream gateway
                    I don't see any other gateway option.

                    In that case you would still have a default route to that gateway in the routing table. You just would not have route-to/reply-to on the states. With one WAN it would probably still work fine. With multi-wan you would hit all kinds of problems. Automatic NAT would also break because it would not consider WAN to be a WAN without a gateway set on the interface configuration. Probably other things too but those are the two biggies.

                    Chattanooga, Tennessee, USA
                    A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                    DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                    Do Not Chat For Help! NO_WAN_EGRESS(TM)

                    1 Reply Last reply Reply Quote 0
                    • DerelictD
                      Derelict LAYER 8 Netgate @dominicm
                      last edited by

                      @dominicm said in Static IP on WAN results in no connectivity:

                      @jknott

                      From what you said it seems like /32 would never be usable in WAN settings so why would it be the default I do not understand. I would expect a default to be the most common config or something similar.

                      Probably best to just set the correct netmask and move on. I have brought this up several times. It is not going to change. No matter what the default is set to it will be wrong for most people.

                      It is incumbent upon the administrator to set the proper interface address and netmask on a new interface.

                      Chattanooga, Tennessee, USA
                      A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                      DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                      Do Not Chat For Help! NO_WAN_EGRESS(TM)

                      1 Reply Last reply Reply Quote 0
                      • jimpJ
                        jimp Rebel Alliance Developer Netgate
                        last edited by

                        There are some backwoods providers out there that give customers a /32 WAN IP Address with a gateway outside of what would otherwise be their subnet. It's ugly, but it happens.

                        As @Derelict said, no matter what we pick as the default it will be wrong more often than it is right. Using /32 as the default is less likely to break something than using /1 as the default, and any value in the middle is a wild guess.

                        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                        Need help fast? Netgate Global Support!

                        Do not Chat/PM for help!

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.