Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Can't load Web GUI when WAN is down

    Scheduled Pinned Locked Moved General pfSense Questions
    22 Posts 4 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      northwarks
      last edited by

      I'm running 2.4.5-RELEASE-p1 (arm) on a SG-3100, we have been having a number of WAN outages over the last week attributed to ongoing work locally. I'm unable to access the GUI when the WAN is down from my LAN on any device, it responds to a ping and snmp is still up. Last night it was down for >2hours and PFSense failed to negotiate a new WAN IP so had to be manually power cycled this morning.

      Has anyone got any pointers as to what I can do when the WAN goes down to access the GUI or config changes I can make?

      Many Thanks

      1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan
        last edited by Gertjan

        Like https://redmine.pfsense.org/issues/8987 ?

        edit : 2.4.5-p1 should be better ;)

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        noplanN 1 Reply Last reply Reply Quote 0
        • noplanN
          noplan
          last edited by

          @northwarks said in Can't load Web GUI when WAN is down:

          t it was down for >2hours and PFSense failed to negotiate a new WAN IP so had to be manually power cycled this morning.
          Has anyone got any pointers as to what I can do when the WAN goes down to access the GUI or config changes I can make?

          can you ssh in ?

          1 Reply Last reply Reply Quote 1
          • noplanN
            noplan @Gertjan
            last edited by

            @Gertjan said in Can't load Web GUI when WAN is down:

            Like https://redmine.pfsense.org/issues/8987 ?

            edit : 2.4.5-p1 should be better ;)

            dammmm toooo slow ! ;)

            1 Reply Last reply Reply Quote 0
            • GertjanG
              Gertjan
              last edited by

              The SSH process isn't doing any DNS , or at least, doesn't wait for it.
              SSH always works.

              It's a GUI thing - the web server, that executes PHP script that executes tasks like 'update check, 'motd' update, bogon files, etc.

              No "help me" PM's please. Use the forum, the community will thank you.
              Edit : and where are the logs ??

              noplanN 1 Reply Last reply Reply Quote 0
              • noplanN
                noplan @Gertjan
                last edited by

                @Gertjan

                after ssh checkin top ...
                for something like this :(
                50a7c95c-ec68-4993-9f41-e2f3278c08e6-grafik.png

                than the classic DHCP release renew IP problem on WAN

                after that the upgrade to 5-p1

                1 Reply Last reply Reply Quote 0
                • N
                  northwarks
                  last edited by

                  Thanks all - I'll await the next outage

                  @noplan @Gertjan - I never checked SSH, definatly one to check when it goes down again.
                  @Gertjan - I've never noticed the bug before, I've always been able to access the GUI until 2.4.5-p1. I'll take a look at that thread, thanks for the pointer.

                  1 Reply Last reply Reply Quote 0
                  • GertjanG
                    Gertjan
                    last edited by Gertjan

                    @northwarks : Have a look at the settings of your WAN interface :
                    These settings :
                    "DHCP Client Configuration" and check "Advanced Configuration".
                    Here you can try some time delays.
                    Like the hold-off when the modem because unreachable after an ISP outage, and re creating the connection takes minutes, to long for the pfSense DHCP client - or give a list with IP networks it should not accept ( typically, RFC1918 ).

                    No "help me" PM's please. Use the forum, the community will thank you.
                    Edit : and where are the logs ??

                    N noplanN 2 Replies Last reply Reply Quote 0
                    • N
                      northwarks @Gertjan
                      last edited by

                      @Gertjan said in Can't load Web GUI when WAN is down:

                      @northwarks : Have a look at the settings of your WAN interface :
                      These settings :
                      "DHCP Client Configuration" and check "Advanced Configuration".
                      Here you can try some time delays.
                      Like the hold-off when the modem because unreachable after an ISP outage

                      Thanks @Gertjan - I don't see any options for "Like the hold-off when the modem because unreachable after an ISP outage" ?

                      1 Reply Last reply Reply Quote 0
                      • GertjanG
                        Gertjan
                        last edited by

                        One of these :

                        6d823c01-fcab-4556-8690-7c8b0e6bba8b-image.png

                        euh .... back-off !

                        No "help me" PM's please. Use the forum, the community will thank you.
                        Edit : and where are the logs ??

                        N 1 Reply Last reply Reply Quote 0
                        • N
                          northwarks @Gertjan
                          last edited by

                          @Gertjan - Interesting I don't have that ?

                          e9afc544-71ee-44e6-92d5-a251fda0254c-image.png

                          1 Reply Last reply Reply Quote 0
                          • GertjanG
                            Gertjan
                            last edited by

                            You showing the Advanced option for the DHCP IPv6 client.

                            Just above you have the DHCP Client Configuration option (IPv4).

                            No "help me" PM's please. Use the forum, the community will thank you.
                            Edit : and where are the logs ??

                            1 Reply Last reply Reply Quote 0
                            • N
                              northwarks
                              last edited by northwarks

                              @Gertjan - I don't have the IPv4 option or should this be under the PPoE settings somewhere?

                              6706696d-c40c-4b92-b77c-a53b95e921e9-image.png

                              1 Reply Last reply Reply Quote 0
                              • noplanN
                                noplan @Gertjan
                                last edited by noplan


                                @Gertjan
                                DHCP Client Configuration" and check "Advanced Configuration".
                                Here you can try some time delays.
                                Like the hold-off when the modem because unreachable after an ISP outage, and re creating the connection takes minutes, to long for the pfSense DHCP client - or give a list with IP networks it should not accept ( typically, RFC1918 )

                                or in the other way round, when a cisco cable modem not getting
                                an officical IP it hands out a private IP to the WAN If of pfS
                                so am I gettin this right I can block this IP-Range and

                                a) WAN shows offline as long as no other (not blocked IP ) reveived
                                b) pfS still tries to get an IP on the WAN port (sends request to Modem)

                                cuz its monday i prefer to talk first then test and cut the wire ;)

                                brNP

                                N 1 Reply Last reply Reply Quote 0
                                • N
                                  northwarks @noplan
                                  last edited by

                                  @noplan That makes sense to me
                                  @Gertjan - I just noticed I have an idle timeout in PPoE

                                  0b3a3e42-810e-40fc-ab1c-4751b0caaac3-image.png

                                  So as my interface is rarely silent I could probably use this ?

                                  1 Reply Last reply Reply Quote 0
                                  • GertjanG
                                    Gertjan
                                    last edited by Gertjan

                                    Correct.

                                    You just mentionned some new, cruicial info.
                                    You're not using DHCP (IP4v).
                                    You're using : *
                                    c30ebfd9-7a57-40c4-b26f-e31813c927fe-image.png

                                    PPPoE.

                                    That one tries to connect itself using a indefint loop.
                                    It will try, and failed, pause 10 seconds, try again, etc.

                                    This protocol implies that the upstream modem re connects itself, so that 'PPPoE' works.
                                    But something failed to connect.

                                    I've been using PPPoE myself for years. Don't recall much issues, although it's a "protocol over a protocol". All or most depends on the modem used, the ISP - and more factor you actually don't control.
                                    Except one maybe : hook up to an UPS both pfSense and the modem.

                                    edit :

                                    @northwarks said in Can't load Web GUI when WAN is down:

                                    I just noticed I have an idle timeout in PPoE

                                    Don't use that one.
                                    It exists for ancient reasons : have the connection drop if there is no traffic ant more. usefull when people apid for every bit they send and received. It's all flat based they days, this option isn't really needed any more and doesn't bring a solution for you. probably another problem.

                                    No "help me" PM's please. Use the forum, the community will thank you.
                                    Edit : and where are the logs ??

                                    1 Reply Last reply Reply Quote 1
                                    • N
                                      northwarks
                                      last edited by

                                      So another outage early this morning, resulting in yet another power reset of the box, I can't access the GUI, doesn't ever load even after 30/60/90 seconds.

                                      It responds to a ping, my network monitor box is seeing snmp as up and no data passing. I can't SSH into the box but port 22 is up, it just times out.

                                      As this looks like an issue related to DNS what can I look to add to the settings to get the 3100 to timeout and give me GUI access?

                                      GertjanG 1 Reply Last reply Reply Quote 0
                                      • RicoR
                                        Rico LAYER 8 Rebel Alliance
                                        last edited by

                                        System > Update > Update Settings > Disable the Dashboard auto-update check

                                        -Rico

                                        noplanN 1 Reply Last reply Reply Quote 0
                                        • noplanN
                                          noplan @Rico
                                          last edited by

                                          @Rico

                                          really ... awesome !
                                          @northwarks plz keep us posted brNP

                                          N 1 Reply Last reply Reply Quote 0
                                          • N
                                            northwarks @noplan
                                            last edited by

                                            @noplan @Rico - Well that's a top tip, I've changed the setting, let me give it 24/48hrs to see if this fixes the issue.

                                            This week has been frustrating as the 3100 is in a rack at the back of my garage and not easy to get at every day.

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.