Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    How to get pfSense WAN to accept VLAN 0

    Scheduled Pinned Locked Moved General pfSense Questions
    414 Posts 25 Posters 212.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mikela @stephenw10
      last edited by

      Thanks so much for your help!

      I had that from the start and it did not work. I checked the config.xml file and the shellcmd package was putting extra stuff in there. So I removed the package and edited the config file manually and viola! it worked. Only thing left id to test the internet connection when I get home.

      1 Reply Last reply Reply Quote 1
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Interesting. The shellcmd package works fine AFAIK. I have it running scripts here on several boxes.

        M 1 Reply Last reply Reply Quote 0
        • M
          mikela @stephenw10
          last edited by

          @stephenw10
          It worked fine on my other pfsense box as well. Strange huh?
          Anyway I wanted to let you know i got it working minus a couple of issue:

          1. Unable to get DHCP6 addrss.
          2. Looks like a took a little bit of a speed hit as well.

          I'd love to hear any suggestions you have, you totally helped me out.
          Thanks

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            There's some discussion of v6 on the pfatt pages. May or may not be related. If it's just dhcpv6 I would expect it to be pulled over vlan0 like v4. So there's probably something else going on there.

            Everything has to go through netgraph so I would expect a lot more CPU cycles to be required. There may be some tuning options it's not something I've ever looked into.
            Try running top -aSH and see how the loading is spread across the CPU cores. Something might be single threaded now.

            Steve

            1 Reply Last reply Reply Quote 0
            • R
              radwimp @natbart
              last edited by

              @natbart just want to say thanks for figuring this out, it’s working great for me so far. just recently upgraded Fibe and my HH3000 would literally just freeze when maxing the connection out. Ecstatic that I can finally drop kick that POS and just have my pfsense box. Glad you didn’t give up and managed to figure it out. Great work.

              1 Reply Last reply Reply Quote 1
              • J
                jaredo
                last edited by

                @natbart Here is another thank you for the hard work you did. I am posting this via my Frontier Fiber modem through a SG-3100 running your netgraph script. Appreciate all the help. Also a shoutout to @stephenw10 for lots of posts and replies before we figured out where my problem lay.

                N 1 Reply Last reply Reply Quote 0
                • J jaredo referenced this topic on
                • J jaredo referenced this topic on
                • N
                  natbart @jaredo
                  last edited by

                  @jaredo - Your welcome. It was definitely a learning experience! Glad I could help others out, the same way the community helped me find this out.

                  Have you tried it with 2.5.x? I am still on 2.4.5-RELEASE-p1 (amd64) and worried to upgrade. Please let me know.

                  J R 2 Replies Last reply Reply Quote 0
                  • J
                    jaredo @natbart
                    last edited by

                    @natbart said in How to get pfSense WAN to accept VLAN 0:

                    Have you tried it with 2.5.x? I am still on 2.4.5-RELEASE-p1 (amd64) and worried to upgrade. Please let me know.

                    I am using a SG-3100 at our office (the fiber location) so I am running 21.05.2-RELEASE (arm) which is 2.5.x on the community edition. Been running for the last week without any issues. I would say it is safe for you to update.

                    1 Reply Last reply Reply Quote 0
                    • R
                      radwimp @natbart
                      last edited by

                      @natbart also no issues here running the latest version here, using the community version 2.5.2.

                      1 Reply Last reply Reply Quote 0
                      • c45p32C
                        c45p32
                        last edited by

                        Don't upgrade to 2.6.0 or CE 22.01 it breaks the vlan0 script. The script runs without errors, and you can assign the correct interface to WAN, but it won't get an ip address from your ISP. Tried this on 2 routers and got the same result. Rolled back to 2.5.2 and everything works again. This is just a heads up to people wanting to use this script.

                        stephenw10S 1 Reply Last reply Reply Quote 1
                        • stephenw10S
                          stephenw10 Netgate Administrator @c45p32
                          last edited by

                          @c45p32 What NICs are you using?
                          This is almost certainly the same issue pfatt users are seeing.

                          Steve

                          c45p32C 1 Reply Last reply Reply Quote 0
                          • c45p32C
                            c45p32 @stephenw10
                            last edited by

                            @stephenw10

                            Both routers use intel nics.

                            1 Reply Last reply Reply Quote 0
                            • stephenw10S
                              stephenw10 Netgate Administrator
                              last edited by

                              Assuming they are em or igb loading Intels driver will probably fix it as shown here:
                              https://github.com/MonkWho/pfatt/issues/67#issuecomment-1043358822

                              Not a permanent solution but would confirm the problem.

                              Steve

                              c45p32C 1 Reply Last reply Reply Quote 1
                              • c45p32C
                                c45p32 @stephenw10
                                last edited by

                                @stephenw10

                                Oh... Thank You! One is em and the other is igb, so I will give this a try later night.

                                c45p32C 1 Reply Last reply Reply Quote 0
                                • c45p32C
                                  c45p32 @c45p32
                                  last edited by

                                  Tested the driver and was still not able to get an IP address.

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Would probably only work if it's igb carrying vlan 0 there. If it's em you'd need that instead.

                                    Steve

                                    c45p32C 1 Reply Last reply Reply Quote 0
                                    • c45p32C
                                      c45p32 @stephenw10
                                      last edited by c45p32

                                      @stephenw10

                                      Ok, I went ahead and went cowboy and upgraded my main router (igb) and it worked. I put the fix in then upgraded to 2.6.0 worked, went to CE, and still worked all the way from 2.5.2.

                                      Do you have instructions on how to compile that driver for em? I tried and it couldn't find the kernel modules.

                                      Thank you again for all your help!!

                                      D C 2 Replies Last reply Reply Quote 0
                                      • stephenw10S
                                        stephenw10 Netgate Administrator
                                        last edited by

                                        You might need to use the merged driver for that. Not something I've tried recently.

                                        D 2 Replies Last reply Reply Quote 0
                                        • D
                                          dayneparrott
                                          last edited by

                                          I can’t seem to get pfsense to pull an IP via vlan0 using that netgate script, using 2.5.2 CE with a HP NC552SFP+ card, Nokia GPON transceiver provided by Bell MTS (Central Canada).

                                          I’ve set the MAC address for the old router in pfsense on the wan interface and in the script, it links fine. Doesn’t pull an IP address, just says 0.0.0.0

                                          c45p32C 1 Reply Last reply Reply Quote 0
                                          • D
                                            dayneparrott @stephenw10
                                            last edited by

                                            @stephenw10

                                            1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.