Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OPT1 Interface - Cant run apt-get but can ping 8.8.8.8 or any other address

    Scheduled Pinned Locked Moved Virtualization
    3 Posts 2 Posters 717 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jauyzed
      last edited by

      Hello,

      I have a pfsense vm setup on xenserver with LAN and OPT1 interface setup show below.

      The LAN interface with WiFi AP works just fine but there are some networking issues for the OPT1 interface. I have ubuntu server VM and ubuntu desktop VM shown in the image.

      File contents of /etc/network/interfaces for desktop

      iface eth0 inet static
      address 10.1.10.103
      network 10.1.10.1
      netmask 255.255.255.0
      gateway 10.1.10.1
      broadcast 10.1.1.0
      dns-nameservers 10.1.10.1

      From this VM, I can ping 8.8.8.8 or any destination for that matter. I can ping even LAN devices but I cant browse internet on browser or sudo apt-get commands. It just says waiting for headers and intermitently shows a d/l speed of 2334 b/s. I can ping the VM's in this network from pfsense box and vice versa

      Attached are the firewall settings for each interface WAN and OPT1. I have tried setting few things with firewall rules: any to any, WAN address to OPT1 address, WAN net to OPT1 net/address/single host and ofcourse vice versa. I dont have any NAT settings yet. Using Static IP's on OPT1

      Please let me what I have missed and what Im doing wrong. I have banged my head towards my monitor for several days. I can send any other screenshots as required

      Thanks!
      ![Screenshot from 2017-03-10 17-36-01.png](/public/imported_attachments/1/Screenshot from 2017-03-10 17-36-01.png)
      ![Screenshot from 2017-03-10 17-36-01.png_thumb](/public/imported_attachments/1/Screenshot from 2017-03-10 17-36-01.png_thumb)
      ![Screenshot from 2017-03-10 19-16-09.png](/public/imported_attachments/1/Screenshot from 2017-03-10 19-16-09.png)
      ![Screenshot from 2017-03-10 19-16-09.png_thumb](/public/imported_attachments/1/Screenshot from 2017-03-10 19-16-09.png_thumb)
      ![Screenshot from 2017-03-10 19-16-44.png](/public/imported_attachments/1/Screenshot from 2017-03-10 19-16-44.png)
      ![Screenshot from 2017-03-10 19-16-44.png_thumb](/public/imported_attachments/1/Screenshot from 2017-03-10 19-16-44.png_thumb)

      1 Reply Last reply Reply Quote 0
      • J
        JorgeOliveira
        last edited by

        You have two options:

        1. Disable PV interfaces by adding on the pfSense install:
          hw.xen.disable_pv_nics=1 on /boot/loader.conf.local

        Or:

        1. Disable hardware checksum offloading:
          See: https://forum.pfsense.org/index.php?topic=88467.msg512128#msg512128

        This are two alternative solutions for the problem, choose one or the other.

        My views have absolutely no warranty express or implied. Always do your own research.

        1 Reply Last reply Reply Quote 0
        • J
          jauyzed
          last edited by

          I tried the second option but it didnt work for some reason.

          The first option did the magic. Added that property in the conf file, restarted pfsense.

          pfsense asked to configure new interfaces, The interfaces changed from xe to re. I reassigned the interfaces, boom - i have internet in the OPT1 interface  8)

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.