Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    LAN2 Cannot Connect to main LAN

    Scheduled Pinned Locked Moved L2/Switching/VLANs
    28 Posts 3 Posters 2.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • I
      IanHK
      last edited by

      There will be a short delay!

      Tried to reboot after resaving to get a clean slate, and completely lost all internet connectivity.

      Really appreciate the help and will revert if/when I get off this 3G phone link.

      1 Reply Last reply Reply Quote 0
      • I
        IanHK
        last edited by

        Well, that's a few hours of my life I won't get back!

        Tried absolutely everything I could think of with my Asus Access Point and eventually did a factory reset to get back to a known start point.

        1. I gave up trying to get LAN2 to work, and just set the AP to automatically get the DHCP settings from pfSense. Plugged it back in and was back at the same status as this morning - everything talking to everything but no way to isolate some wifi users form the main network.
        • The auto settings gave my wifi connected PC this setup - note the subset mask that is driven entirely by pfSense on LAN interface: 255.255.255.0

        LAN_DHCP.JPG

        Because everything is driven by pfSense, just for giggles I moved the AP from LAN to LAN2 - and look what happened to the subnet mask - it goes back to the troublesome 255.0.0.0 !!!

        LAN2_DHCP.JPG

        As this is seen as the reason my LAN2>LAN access is not working as it should, can anybody help to explain where/how in pfSense the subnet mask is modified for LAN2 compared to LAN when both are set the same?

        pfSense 2.4.4 release-P1

        Thanks

        1 Reply Last reply Reply Quote 0
        • I
          IanHK
          last edited by

          I modified the LAN2 DHCP settings to 192.168.2.1 /25 and restarted the DHCP service.

          The new lease has got the same 255.0.0.0 issue as before:

          LAN2_NEW_DHCP.JPG

          Bizarre !

          1 Reply Last reply Reply Quote 0
          • NogBadTheBadN
            NogBadTheBad
            last edited by

            Remove the AP from LAN2 and plug the laptop in directly, what do you get then ?

            Andy

            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

            1 Reply Last reply Reply Quote 0
            • I
              IanHK
              last edited by

              I checked for a device getting a DHCP address, rather than static mappings - and it's the same - LAN2 DHCP gives a 255.0.0.0 subnet mask but simply plugging the cable from LAN2 back to LAN the assignments are normal - i.e. 255.255.255.0

              There doesn't seem to be anywhere in pfSense where this could be going wrong - the DHCP settings pick up the correct range of possible IPs based on the interface settings so it appears to have the correct picture of what LAN2 looks like.

              Other than deleting the LAN2 interface completely and re-creating it, does anybody have any other suggestions ?

              Thanks

              1 Reply Last reply Reply Quote 0
              • I
                IanHK
                last edited by

                Hi NogBTB,

                Smart thought - bizarre result!

                I cable connected my PC directly to the LAN2 interface and it gives me:

                • a LAN address of 192.168.1.20 NOT the expected LAN2 address of 192.168.2.20

                • Subnet mask 255.255.255.0

                I originally had the static mappings on the LAN DHCP, and duplicated them to LAN2 (changing x.x1.x to x.x.2.x) so these devices (MACs) are defined in static mappings on both LAN and LAN2.

                I am guessing this is the root cause, and in a steady state I could remove them from LAN once LAN2 is actually working, but should a PC connected to LAN2 be served an LAN IP and/or is there a way to stop it happening while keeping the fallback mappings on the LAN DHCP ?

                Thanks

                1 Reply Last reply Reply Quote 0
                • NogBadTheBadN
                  NogBadTheBad
                  last edited by NogBadTheBad

                  Post a copy of the following:-

                  1. An ipconfig /all when directly connected to LAN2

                  2. An arp -a when directly connected to LAN2

                  3. Status-> Interfaces LAN & LAN2.

                  Andy

                  1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                  1 Reply Last reply Reply Quote 0
                  • I
                    IanHK
                    last edited by

                    Will do, thanks. Just need a moment to let things settle....

                    1 Reply Last reply Reply Quote 0
                    • I
                      IanHK
                      last edited by

                      Current status:

                      1. I removed the "duplicate" static mappings so now LAN only has static IPs defined for the wired devices, and LAN2 only has static mappings for the WiFi devices.

                      2. For my workstation, I removed all static mappings so it is just picku\ing up DHCP settings.

                      3. LAN2 is defined as 192.168.2.0/25 - I only did this to force a change to be saved to see if it would solve the 255.0.0.0 issue

                      4. I rebooted pfSense

                      5. I double-checked the workstation is using DCHP - when the pfSense box / AP went wonky last night I had a fixed IP which may have caused the situation earlier today, not sure of anything anymore!

                      Now, with workstation connected directly to LAN2, I am seeing an x.x.2.x DHCP assigned IP - as expected - but the subnet mask is STILL 255.0.0.0

                      Attached items as requested:

                      • ipconfig /all
                      • arp -a
                      • pfSense Status > Interfaces

                      IpConfigAll.txt

                      Arp-a.txt

                      Status_interfaces.JPG

                      1 Reply Last reply Reply Quote 0
                      • NogBadTheBadN
                        NogBadTheBad
                        last edited by NogBadTheBad

                        192.168.2.1 00-0d-b9-50-e9-82 dynamic

                        hmmm your getting DHCP from the pfSense LAN2 interface, thats why I asked for the arp -a, to tie in the DHCP server IP and the MAC address.

                        The subnet mask is now /25 rather than /24.

                        Can you post a screenshot from the LAN2 config and the DHCP settings for LAN2.

                        Andy

                        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                        1 Reply Last reply Reply Quote 0
                        • I
                          IanHK
                          last edited by

                          Thanks - here you go...

                          LAN2.JPG

                          LAN2DHCP_Part1.JPG

                          LAN2DHCP_Part2.JPG

                          LAN2DHCP_Part3.JPG

                          1 Reply Last reply Reply Quote 0
                          • NogBadTheBadN
                            NogBadTheBad
                            last edited by NogBadTheBad

                            https://www.iana.org/assignments/bootp-dhcp-parameters/bootp-dhcp-parameters.txt

                            https://tools.ietf.org/html/rfc2132

                            Remove DHCP option 1 and try again.

                            No need to go anywhere near the options config for standard users.

                            Andy

                            1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                            1 Reply Last reply Reply Quote 0
                            • I
                              IanHK
                              last edited by

                              You've got to be kidding! That just looked like a default panel with nothing saved - pfSense usually adds rows of saved items in a table underneath.

                              Anyway, I needed to add another row to get a delete option but when i did, the DHCP assigned mask is immediately the expected 255.255.255.0 and from my x.x.2.x workstation I can access the NAS webgui on x.x.1.x

                              So grateful - many, many thanks.

                              NogBadTheBadN 2 Replies Last reply Reply Quote 0
                              • NogBadTheBadN
                                NogBadTheBad @IanHK
                                last edited by

                                @IanHK

                                You can just blank the entry :)

                                Andy

                                1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                1 Reply Last reply Reply Quote 0
                                • NogBadTheBadN
                                  NogBadTheBad @IanHK
                                  last edited by

                                  @IanHK said in LAN2 Cannot Connect to main LAN:

                                  You've got to be kidding! That just looked like a default panel with nothing saved - pfSense usually adds rows of saved items in a table underneath.

                                  Anyway, I needed to add another row to get a delete option but when i did, the DHCP assigned mask is immediately the expected 255.255.255.0 and from my x.x.2.x workstation I can access the NAS webgui on x.x.1.x

                                  So grateful - many, many thanks.

                                  You should be getting a mask of 255.255.255.128 if you have a /25 mask set.

                                  Andy

                                  1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

                                  1 Reply Last reply Reply Quote 0
                                  • I
                                    IanHK
                                    last edited by

                                    Yes, that's what I get with the /25 setting. Thanks again.

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.