Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    internet connection drops out multiple times a day, didn't come back on today

    Scheduled Pinned Locked Moved General pfSense Questions
    23 Posts 4 Posters 1.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • JKnottJ
      JKnott @chuccck
      last edited by

      @chuccck

      What's up? Is the modem working properly? When it fails, do you lose the connection completely? Can you ping the gateway? I assume fe80:2::a677:33ff:fef9:ccea is your WAN interface.

      Also, you've got a lot on there that just noise at this point. Do you really need 2 VPNs and dyndns running? Concentrate on getting the connection going. Is IPv4 working?

      PfSense running on Qotom mini PC
      i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
      UniFi AC-Lite access point

      I haven't lost my mind. It's around here...somewhere...

      C 1 Reply Last reply Reply Quote 0
      • C
        chuccck @JKnott
        last edited by

        Thanks for the reply. I don't need any vpns! I thought I turned them off after experimenting with it. I can turn off the dynamic dns too and go back to duckdns clients.

        How do I confirm the vpns are disabled?

        @JKnott said in internet connection drops out multiple times a day, didn't come back on today:

        @chuccck

        What's up? Is the modem working properly? When it fails, do you lose the connection completely? Can you ping the gateway? I assume fe80:2::a677:33ff:fef9:ccea is your WAN interface.

        Also, you've got a lot on there that just noise at this point. Do you really need 2 VPNs and dyndns running? Concentrate on getting the connection going. Is IPv4 working?

        JKnottJ 1 Reply Last reply Reply Quote 0
        • JKnottJ
          JKnott @chuccck
          last edited by

          @chuccck said in internet connection drops out multiple times a day, didn't come back on today:

          How do I confirm the vpns are disabled?

          I can't say about IPSec, but on the OpenVPN server page there's a check box "Disable this server" which might do the trick.

          PfSense running on Qotom mini PC
          i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
          UniFi AC-Lite access point

          I haven't lost my mind. It's around here...somewhere...

          C 1 Reply Last reply Reply Quote 1
          • C
            chuccck @JKnott
            last edited by

            @JKnott said in internet connection drops out multiple times a day, didn't come back on today:

            @chuccck said in internet connection drops out multiple times a day, didn't come back on today:

            How do I confirm the vpns are disabled?

            I can't say about IPSec, but on the OpenVPN server page there's a check box "Disable this server" which might do the trick.

            ok. I uninstalled some unused packages, disabled the dynamic dns, and deleted any vpn certificates or client setups . It is up and running now, but I still see open and ipsec in the logs.

            JKnottJ 1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott @chuccck
              last edited by

              @chuccck

              If the connection stays up, the problem is with one of those things. It's now a process of elimination to find out which.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              C 1 Reply Last reply Reply Quote 1
              • C
                chuccck @JKnott
                last edited by

                @JKnott thanks. What would be the best way to monitor it or get alerts if it drops again and I'm not on a device to notice it?

                JKnottJ 1 Reply Last reply Reply Quote 0
                • JKnottJ
                  JKnott @chuccck
                  last edited by JKnott

                  @chuccck

                  When I had a similar problem several years ago, I wrote a Linux shell script that would ping my ISPs gateway every minute and log the failures. You could do the same in FreeBSD, which pfSense runs on. PfSense also has gateway monitoring, but I've never used it.

                  PfSense running on Qotom mini PC
                  i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                  UniFi AC-Lite access point

                  I haven't lost my mind. It's around here...somewhere...

                  C 1 Reply Last reply Reply Quote 1
                  • C
                    chuccck @JKnott
                    last edited by

                    @JKnott

                    alright it dropped out again. Below is the log, I set up a remote logging server and filtered out the "filterlog" category items. It looks like something with the dhcpv6 maybe? Do I even need dhcpv6? see anything else? why is there ipsec and openvpn still in there?

                    https://pastebin.com/2XrvvDfV

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      What sort of WAN connection do you have there?

                      You are seeing >20% packet loss to 8.8.8.8. That is causing dpinger to alarm, 20% is default value, triggering other services to reload. It also shows 100ms ping time which is unusually high.
                      If your WAN is wireless of some kind you should tune to gateway monitoring settings to match it. That probably means greater than 20% packet loss in your case.
                      If it's the only gateway you can also disable the monitoring action so it does not trigger service reloads but does still log data.

                      Steve

                      C 1 Reply Last reply Reply Quote 1
                      • C
                        chuccck @stephenw10
                        last edited by stephenw10

                        @stephenw10

                        I'm not trying to do anything complicated. It's just a Netgear modem connected to the wan. I changed the gateway monitor to 8.8.8.8 just to set up some kind of external address for a way to monitor drop outs. Should I disable the gateway monitor?

                        1 Reply Last reply Reply Quote 0
                        • stephenw10S
                          stephenw10 Netgate Administrator
                          last edited by stephenw10

                          I would disable the monitoring action. No need to disable the monitoring. If only as a test.

                          But 100ms to 8.8.8.8 implies some WAN weirdness like a WISP or similar. Is it that?

                          Steve

                          C 1 Reply Last reply Reply Quote 1
                          • C
                            chuccck @stephenw10
                            last edited by

                            @stephenw10 will disable the monitor. Not a wisp, just Comcast line straight to a Netgear cm500 cable mobem

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Hmm, OK. Weirdly high ping then. Suspiciously so.

                              You can disable the monitor but then you'll have no monitoring data to work with. I would just disable the monitoring action.

                              Steve

                              C 1 Reply Last reply Reply Quote 1
                              • C
                                chuccck @stephenw10
                                last edited by

                                @stephenw10 yeah I think it's part of the dropout, I don't think it's a cause

                                1 Reply Last reply Reply Quote 0
                                • chpalmerC
                                  chpalmer
                                  last edited by

                                  Like this-

                                  routing.jpg

                                  Triggering snowflakes one by one..
                                  Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

                                  C 1 Reply Last reply Reply Quote 1
                                  • C
                                    chuccck @chpalmer
                                    last edited by

                                    @chpalmer wow thanks! I thought it was just the box that said monitoring. I should leave that one unchecked and check the disable monitoring action?

                                    1 Reply Last reply Reply Quote 0
                                    • stephenw10S
                                      stephenw10 Netgate Administrator
                                      last edited by

                                      Yup. That will prevent service reloading etc but will still log monitoring data.

                                      In very rare cases we have seen stuff objecting to the monitoring pings but you won't be hitting that on a Comcast cable connection.

                                      Steve

                                      C 1 Reply Last reply Reply Quote 1
                                      • C
                                        chuccck @stephenw10
                                        last edited by

                                        @stephenw10 thanks! Do this for both ipv4 and ipv6?

                                        1 Reply Last reply Reply Quote 0
                                        • stephenw10S
                                          stephenw10 Netgate Administrator
                                          last edited by

                                          Yes.

                                          C 1 Reply Last reply Reply Quote 1
                                          • C
                                            chuccck @stephenw10
                                            last edited by

                                            @stephenw10 @JKnott thanks so much guys for the help, very encouraged by the support you guys provide to complete newbs like me.

                                            Off topic question, is there a influxdb subforum? I havr telegraf and ntoppng both populating their own databases on my influxdb server but am having trouble pulling the data the way I want. I am up against Comcast data caps ( temporarily lifted thank god) so I want to track total data downloaded and uploaded by IP address in each calendar month.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.