Network stuck



  • Hello 2 every one.
    I installed pfsense 2.3.3 on my Firebox x750e with some updates.
    2GB ram and 320GB SATA
    I was update on last build 2.3.3_1 without any problem.
    I don't use or setup any special services. The device working now in test mode.

    My device has two network card's: sk0…3  and msk0...3
    My WAN port is sk0
    My LAN - msk0+msk1+msk2+msk3 => LAGG (ROUNDROBIN) => lagg0

    I use DHCP server for lagg0 and nat for all network.
    All working fine, but from time to time my local network is stuck.(I don't do anything on this time with pfsense)
    The mistake like is miracle.
    In one moment all traffic is stoped. I can't ping gate or do something else. In this moment i was connected to WAN port without any problems. In status page All network interfaces has status "OK". I dmesg or system log i don't see any of fatal errors.

    pfctl -f /tmp/rules.debus
    ```- doesn't resolve the issue.
    So, was save dmesg and system log and reboot the device. Now all working fine, but i dont know when network is stuck in next time.
    
    Some helpful info:
    

    `--# cat /boot/loader.conf.local
    hint.ata.0.mode=PIO4
    kern.cam.boot_delay=10000
    hw.msk.msi_disable=1
    if_sk_load="yes"
    if_msk_load="yes"

    
    

    `--# ifconfig lagg0
    lagg0: flags=8843 <up,broadcast,running,simplex,multicast>metric 0 mtu 1500
            options=c001b <rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwtso,linkstate>ether 00:90:7f:43:6d:fd
            inet6 fe80::290:7fff:fe43:6dfd%lagg0 prefixlen 64 scopeid 0xd
            inet 10.20.30.1 netmask 0xffffff00 broadcast 10.20.30.255
            nd6 options=21 <performnud,auto_linklocal>media: Ethernet autoselect
            status: active
            laggproto roundrobin lagghash l2,l3,l4
            laggport: msk0 flags=0<>
            laggport: msk1 flags=0<>
            laggport: msk2 flags=0<>
            laggport: msk3 flags=4<active></active></performnud,auto_linklocal></rxcsum,txcsum,vlan_mtu,vlan_hwtagging,vlan_hwtso,linkstate></up,broadcast,running,simplex,multicast>

    
    part of dmesg before reboot
    
    

    msk0: link state changed to DOWN
    204 lagg0: IPv6 addresses on msk0 have been removed before adding it as a member to prevent IPv6 address scope violation.
    205 lagg0: link state changed to DOWN
    206 msk1: link state changed to DOWN
    207 lagg0: IPv6 addresses on msk1 have been removed before adding it as a member to prevent IPv6 address scope violation.
    208 msk2: link state changed to DOWN
    209 lagg0: IPv6 addresses on msk2 have been removed before adding it as a member to prevent IPv6 address scope violation.
    210 msk3: link state changed to DOWN
    211 lagg0: IPv6 addresses on msk3 have been removed before adding it as a member to prevent IPv6 address scope violation.
    212 sk0: link state changed to DOWN

    
    part of syslog before reboot
    
    

    5621 Mar 24 15:54:12 MyGate kernel: random: <software, yarrow=""> initialized
    5622 Mar 24 15:54:12 MyGate kernel: ioapic0: Assuming intbase of 0
    5623 Mar 24 15:54:12 MyGate kernel: ioapic0 <version 2.0=""> irqs 0-23 on motherboard
    5624 Mar 24 15:54:12 MyGate kernel: wlan: mac acl policy registered
    5625 Mar 24 15:54:12 MyGate kernel: ipw_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/.
    5626 Mar 24 15:54:12 MyGate kernel: ipw_bss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.c
    5627 Mar 24 15:54:12 MyGate kernel: module_register_init: MOD_LOAD (ipw_bss_fw, 0xc08174e0, 0) error 1
    5628 Mar 24 15:54:12 MyGate kernel: ipw_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/.
    5629 Mar 24 15:54:12 MyGate kernel: ipw_ibss: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/loader.
    5630 Mar 24 15:54:12 MyGate kernel: module_register_init: MOD_LOAD (ipw_ibss_fw, 0xc0817590, 0) error 1
    5631 Mar 24 15:54:12 MyGate kernel: ipw_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_ipw/.
    5632 Mar 24 15:54:12 MyGate kernel: ipw_monitor: If you agree with the license, set legal.intel_ipw.license_ack=1 in /boot/load
    5633 Mar 24 15:54:12 MyGate kernel: module_register_init: MOD_LOAD (ipw_monitor_fw, 0xc0817640, 0) error 1
    5634 Mar 24 15:54:12 MyGate kernel: iwi_bss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi/.
    5635 Mar 24 15:54:12 MyGate kernel: iwi_bss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.c
    5636 Mar 24 15:54:12 MyGate kernel: module_register_init: MOD_LOAD (iwi_bss_fw, 0xc083f030, 0) error 1
    5637 Mar 24 15:54:12 MyGate kernel: iwi_ibss: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi/.
    5638 Mar 24 15:54:12 MyGate kernel: iwi_ibss: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/loader.
    5639 Mar 24 15:54:12 MyGate kernel: module_register_init: MOD_LOAD (iwi_ibss_fw, 0xc083f0e0, 0) error 1
    5640 Mar 24 15:54:12 MyGate kernel: iwi_monitor: You need to read the LICENSE file in /usr/share/doc/legal/intel_iwi/.
    5641 Mar 24 15:54:12 MyGate kernel: iwi_monitor: If you agree with the license, set legal.intel_iwi.license_ack=1 in /boot/load
    5642 Mar 24 15:54:12 MyGate kernel: module_register_init: MOD_LOAD (iwi_monitor_fw, 0xc083f190, 0) error 1
    5643 Mar 24 15:54:12 MyGate kernel: kbd1 at kbdmux0
    5644 Mar 24 15:54:12 MyGate kernel: ACPI BIOS Error (bug): A valid RSDP was not found (20150515/tbxfroot-258)
    5645 Mar 24 15:54:12 MyGate kernel: ACPI: Table initialisation failed: AE_NOT_FOUND
    5646 Mar 24 15:54:12 MyGate kernel: ACPI: Try disabling either ACPI or apic support.
    5647 Mar 24 15:54:12 MyGate kernel: cryptosoft0: <software crypto=""> on motherboard
    5648 Mar 24 15:54:12 MyGate kernel: padlock0: No ACE support.
    5649 Mar 24 15:54:12 MyGate kernel: pcib0: <mptable host-pci="" bridge=""> pcibus 0 on motherboard
    5650 Mar 24 15:54:12 MyGate kernel: pci0: <pci bus=""> on pcib0</pci></mptable></software></version></software,>

    
    Please help, its really important for me.


  • No one ideas?


  • Netgate Administrator

    Nothing definite unfortunately.

    Typically you would see a watchdog timeout error from one of the msk NICs on the console. You might try leaving a serial console connected to see it anything is shown.

    Did you see this without the modified drivers? I've no idea what those were compiled against or what changes went into them. I didn't compile those 10.X modules.

    Steve


Log in to reply