Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    XG2758 LAN not getting out to WAN

    Scheduled Pinned Locked Moved Official Netgate® Hardware
    29 Posts 5 Posters 2.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      david.mundt @stephenw10
      last edited by

      @stephenw10 said in XG2758 LAN not getting out to WAN:

      Still the same questions, start from the lowest level and work up:

      Do you see link LEDs on the WAN?

      Do you see the WAN pull and IP address (if it's using dhcp)?

      If it's static check the ARP table for anything on the WAN.

      Steve

      Sorry for the delay guys. I've been swamped and just now able to get back to this.

      The LAN and WAN links show link lights

      WAN pulls an IPv6 address from DHCP but not IPv4 so I set it to static

      ARP table shows a MAC from the upstream first hop router with the ISP

      Dashboard shows both interfaces as UP... Still unable to ping outside

      Screen Shot 2020-04-22 at 8.00.25 AM.png

      WAN IP is not missing its just been redacted on this screenshot

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Does it pull a real, routable IPv6 address? Can you ping6 out of it?

        But you cannot ping the first hop device using whatever IP it appears as?

        Are you sure you're using the correct IP and gateway info?

        Steve

        D 1 Reply Last reply Reply Quote 0
        • D
          david.mundt @stephenw10
          last edited by

          @stephenw10 said in XG2758 LAN not getting out to WAN:

          Does it pull a real, routable IPv6 address? Can you ping6 out of it?

          But you cannot ping the first hop device using whatever IP it appears as?

          Are you sure you're using the correct IP and gateway info?

          Steve

          config is what ISP provided. Yes it is correct, it's the same IP config loaded on the old internal router.

          I am able to ping google.com using IPv6 but it fails for IPv4

          1 Reply Last reply Reply Quote 0
          • DerelictD
            Derelict LAYER 8 Netgate
            last edited by

            If it is supposed to be DHCP and you set it to static it will probably not work.

            Configure it how the ISP says to configure it based on how it is provisioned.

            If it is supposed to be DHCP and you are not getting a lease you need to troubleshoot why - maybe with the ISP - not set it to some random provisioning.

            Chattanooga, Tennessee, USA
            A comprehensive network diagram is worth 10,000 words and 15 conference calls.
            DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            D 1 Reply Last reply Reply Quote 0
            • D
              david.mundt @Derelict
              last edited by

              @Derelict said in XG2758 LAN not getting out to WAN:

              If it is supposed to be DHCP and you set it to static it will probably not work.

              Configure it how the ISP says to configure it based on how it is provisioned.

              If it is supposed to be DHCP and you are not getting a lease you need to troubleshoot why - maybe with the ISP - not set it to some random provisioning.

              ISP is spectrum and I've got other clients using the same ISP and it's always a static IPv4 address. I just tried DHCP on 4 and 6 and IPv4 gets 0.0.0.0 for its IP.

              Still able to ping google.com with v6 and unable to ping using v4

              DerelictD 1 Reply Last reply Reply Quote 0
              • DerelictD
                Derelict LAYER 8 Netgate @david.mundt
                last edited by

                @david-mundt There is a difference between DHCP always assigning the same "static" address and a statically-configured interface.

                I do not know how spectrum is doing things on that circuit. The WAN interface needs to be configured to match whatever they are doing with the provisioning.

                If it is really static, you might need to take steps like packet-capturing on the WAN to see what happens when you ARP for the gateway address, etc.

                There is certainly nothing peculiar about an XG-2758 WAN interface and a DHCP or a static configuration.

                Chattanooga, Tennessee, USA
                A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                Do Not Chat For Help! NO_WAN_EGRESS(TM)

                D 1 Reply Last reply Reply Quote 0
                • D
                  david.mundt @Derelict
                  last edited by

                  @Derelict said in XG2758 LAN not getting out to WAN:

                  @david-mundt There is a difference between DHCP always assigning the same "static" address and a statically-configured interface.

                  I do not know how spectrum is doing things on that circuit. The WAN interface needs to be configured to match whatever they are doing with the provisioning.

                  If it is really static, you might need to take steps like packet-capturing on the WAN to see what happens when you ARP for the gateway address, etc.

                  There is certainly nothing peculiar about an XG-2758 WAN interface and a DHCP or a static configuration.

                  Yes I understand but with Spectrum Business they provide IPv4 address, gateway IP, and CIDR mask. I worked with their tech support on this because I figured they were holding the MAC address of the old router and the Netgate conflicts with that but the techs acted like they hadn't heard of what I'm saying. I'm beginning to feel more and more like this is a Spectrum issue NOT the netgate.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Yes, it does seem that way.

                    You do see the expected gateway IP in the populated ARP table with a MAC?

                    That at least would confirm they are giving you some correct info.

                    Steve

                    D 1 Reply Last reply Reply Quote 0
                    • D
                      david.mundt @stephenw10
                      last edited by

                      @stephenw10 yes the GW IP and MAC are in the ARP Table

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Hmm, well you're in the correct segment at least then.

                        If you run a packet capture on WAN do you see the gateway ARPing for other IPs? Any other traffic?

                        It does seem like a problem with the upstream device though. Either blocking your traffic/MAC or unable to respond somehow. They are responding to your ARP requests though.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • DerelictD
                          Derelict LAYER 8 Netgate
                          last edited by

                          Yeah. Packet capture on WAN for the gateway IP address and protocol ICMP.

                          Ping the gateway address using Diagnostics > Ping.

                          Stop the capture.

                          Do you see the echo requests go out? Are they replied to? You can also examine the MAC addresses there to determine that the source address is your WAN address and the destination address is the MAC address for the gateway IP address from the ARP table. There really isn't any way that would not be the case but it is worth checking.

                          Just set the level of detail to Full and hit view capture to see that. There is no need to capture again.

                          Chattanooga, Tennessee, USA
                          A comprehensive network diagram is worth 10,000 words and 15 conference calls.
                          DO NOT set a source address/port in a port forward or firewall rule unless you KNOW you need it!
                          Do Not Chat For Help! NO_WAN_EGRESS(TM)

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.