Urgent Lan Dropping

Jimbohello

new setup with 10 gbe!
every 24-48 hours the lan side no longer has network!
no more computers have dhcp (even static in my pc, no network)
by cons wan side I am able to access the pfsense!

is there a specific setting for this type of card?

thank you

pfsense 2.4.5
lan nic
82598EB 10-Gigabit AF Dual Port Network Connection
ix0: <Intel(R) PRO/10GbE PCI-Express Network Driver, Version - 3.2.12-k> port 0xd020-0xd03f mem 0xdf0a0000-0xdf0bffff,0xdf040000-0xdf07ffff,0xdf0c4000-0xdf0c7fff at device 0.0 on pci2
ix0: Using MSI-X interrupts with 5 vectors
ix0: Ethernet address: 00:1b:21:54:b2:55
ix0: PCI Express Bus: Speed 2.5GT/s Width x4
ix0: PCI-Express bandwidth available for this card
ix0: For optimal performance a x8 PCIE, or x4 PCIE Gen2 slot is required.
ix0: netmap queues/slots: TX 4/2048, RX 4/2048

ix0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
options=8500b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWFILTER,VLAN_HWTSO>
ether 00:1b:21:54:b2:55
hwaddr 00:1b:21:54:b2:55
inet6 fe80::21b:21ff:fe54:b255%ix0 prefixlen 64 scopeid 0x2
inet 10.13.39.1 netmask 0xffffff00 broadcast 10.13.39.255
nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
media: Ethernet autoselect (10Gbase-SR <full-duplex,rxpause,txpause>)
status: active

stephenw10

You need to determine what exactly is failing. Check Status > Services, is anything down?

Check Status > Interfaces, is the LAN still UP?

Check the system logs when this happens.

You may be exhausting something. See:
https://docs.netgate.com/pfsense/en/latest/hardware/tuning-and-troubleshooting-network-cards.html#intel-ix-4-cards

Steve

JKnott

@Jimbohello said in Urgent Lan Dropping:

even static in my pc, no network

If even static devices lose the network, it has nothing to do with pfSense. Perhaps a little more info would help.

Jimbohello

@JKnott

Maybe switch need to be to autoselect like pfsense !!

Or both on static setting like 10gbe full duplex?

Hard to diagnostic when nothing as Failed on 1 gig lan for almost 5 years

Switch lenovo ce0152tb campus

Thank’s

JKnott

@Jimbohello

First off, always use autoconfig, unless you have some specific reason to not use it. However, do some testing. If you have 2 computers with static addresses, can you ping between them? If not, it's likely a switch issue, as pfSense is not used between devices on the same LAN. Even with DHCP, it should take some time for a failure to be noticeable, as devices retain their address, until the lease expires. Break the problem into byte size pieces, so that you can see what's failing. What you're doing is like calling up a mechanic and sayimg "My car doesn't work, what's wrong?"

Jimbohello

@JKnott

Thank’s for your help !

Already know about that !

I’ll look futher into the switch !

Don’t worried your help is please ! Than’s a lot

stephenw10

If the switch port is set to fixed speed/duplex then the pfSense end should also be.

On some 10G/1G dual speed ports we do see it is sometimes necessary to set 1G fixed to get a link.

None of that should fail after some time though, it would either link or not. Something like an mbuf exhaustion would usually prevent traffic on all interfaces.
Checking the logs for clues would be my first step here.

Steve

Jimbohello

@stephenw10
appreciate the tip steve
All log or you have in mind a specefic one ?

stephenw10

The main System log in pfSense. I'd also check the switch log for link failure on the port.

Jimbohello

@stephenw10

Master crash today all network down .
So i find out that all packet on the lan where getting error in or out don’t remember ! Like million of error

I put back my intel 1000 pro
And everything look fine

So i thin’k 3 possibility is possible
Failed nic
Failed fiber
Failed transceiver

I’ll let you know in the future

Jimbohello

@stephenw10

told you ill get back to you

after more than 2-3 month, no more crash

i did change both transceiver and fiber!

but i think the issue was witthing the switch

i realise that does switch work in tandem port 49/50
51/52

i believe that the fact that a server was attach in port 49 the issue was cause by having the pfsense lan (dhcp/server) port plug into 50. so i put both server on 49/50 and add the lan fsense to 51.

crash never occur since then!

johnpoz

Huh? Switches don't care what ports you plug stuff into.. Sure you could have a bad port.. But sure doesn't care what you plug into ports that are next to each other ;)

Jimbohello

@johnpoz
your absolutelly right ! but !
SINCE TECHNOLOGY INS'T ALWAYS PERFECT ! THIS SCENARIO IS POSSIBLE !

maybe it's a bug inside the swith ! inside the software or firmware or whatever !

anyway my problem is fix since 2-3 month

manual link:
https://systemx.lenovofiles.com/help/topic/com.lenovo.rackswitch.ce0152pb.doc/CE0128XB_CE0152XB-WGR.pdf

The 10G ports may be configured as stacking or as Ethernet in pairs. Configuring a
10G Ethernet port as stacking will also configure the paired link as stacking.
Likewise, configuring a 10G stack port as Ethernet will configure the paired link as
Ethernet. On the CE0152XB, ports 49/50 and 51/52 are paired. On the CE0128XB,
ports 25/26 and 27/28 are paired.

HAVE A NICE DAYS

Jimbohello

@johnpoz
your absolutelly right ! but !
SINCE TECHNOLOGY INS'T ALWAYS PERFECT ! THIS SCENARIO IS POSSIBLE !

maybe it's a bug inside the swith ! inside the software or firmware or whatever !

anyway my problem is fix since 2-3 month

manual link:
https://systemx.lenovofiles.com/help/topic/com.lenovo.rackswitch.ce0152pb.doc/CE0128XB_CE0152XB-WGR.pdf

The 10G ports may be configured as stacking or as Ethernet in pairs. Configuring a
10G Ethernet port as stacking will also configure the paired link as stacking.
Likewise, configuring a 10G stack port as Ethernet will configure the paired link as
Ethernet. On the CE0152XB, ports 49/50 and 51/52 are paired. On the CE0128XB,
ports 25/26 and 27/28 are paired.

HAVE A NICE DAYS

johnpoz

So combo ports? Yeah you might wanted to mention such details off the top..

Guess should of assumed they were combo from the numbers.. But without details of the special ports your dealing with. They are not your typical common ports on a switch, which don't give 2 shits if server or whatever is next to each other.

Jimbohello

@johnpoz
LOL
i mentionned it ! but i use the word tandem !

sorry about that confusion

i realise that does switch work in tandem port 49/50
51/52

johnpoz

Tandem is not the term have ever heard used.. Been in the business 30 some years, before there there were even switches. Never heard the term used to describe a combo port sorry..

Do a google for tandem port switch, nothing.. do a google for combo port switch.. Gazillion hits..

Tandem how would define it just means next to each other, one behind the other, etc.

Jimbohello

@johnpoz

sorry bro

i’m french canadian !
so that’s the only word who came in my mind for
traduction !

have a nice one
peace ya