pfsense behind Arris disconnetcs weekly

plbowler

Hi all
I've serched for this issue and it mostly appears with Broadcom NICs which I have confirmed I do not have.

about once a week the WAN oes down and I have to reboot pfsnese.
pfsense is in the DMZ of a Wide Open West DVR/wifi/modem Arris
whats the best way to troubleshoot this?
running 2.4.4 on an AMD Phenom(tm) II X6 1045T
NICS:
dge-530t
ar8151

Thanks!

stephenw10

Check the gateway log to see if you actually lose the WAN.

Check the DHCP log for dhclient entries at the time. Does it pull a bad lease? The modem might be handing out a private lease if the cable connection goes down.

You might be hitting this: https://redmine.pfsense.org/issues/9267
That is patched in 2.4.5.

Steve

plbowler

@stephenw10 Thanks
Clarification
Gatreway log on the pfsense or on the Arris, I assue the Arris

chpalmer

What model Arris?

Anything running on the Puma6 chipset could still be affected by the issues prevalent in the original release of these modems. (check my signature) UDP traffic can be affected badly.

Wide Open West is not getting out the firmware to mitigate this as fast as some would like according to reports Ive seen.

plbowler

MG5225G/NA

Don't see it on the list.
I feel like this is a worst case scenario for what I'l trying to do, relying on a retail Media Gateway to preroute packets to my pfsense....

Edit
So doing some reading it appears that putting the arris in Bridge mode may be what i'm after.
this makes more sense than the DMZ and I'm wondering if it will eliminate the disconnects

chpalmer

@plbowler said in pfsense behind Arris disconnetcs weekly:

MG5225G

Bridge mode is usually better. That is an older gateway modem isnt it? 8x4.

stephenw10

@plbowler said in pfsense behind Arris disconnetcs weekly:

Gatreway log on the pfsense or on the Arris, I assue the Arris

In pfSense. It will show the gateway go down if it actually does.

If the modem is not in bridge mode it would only show anything happening to the modem of course. Unless you have changed the monitoring IP to something upstream.

Steve

plbowler

@chpalmer the MG5225G appears to be Docsis3.0
Wide open west checked my equipmwent remotely before upgrading to 500megs so I assume they are comforatble with the 3.0 limitations.
I'm going to roll out a new pfsense on a Dell r410 today becuase I can :)
when that's done I will enable bridge mode mode on the MG5225G.

stephenw10

Both parts of that dhclient fix are in 2.4.5 so you might want to test that again.

Steve