I have to power cycle my pfsense device every morning, worse than a cheap consumer router. Can someone point me in the right direction? SG-1100 running 21.02-RELEASE-p1.
-
I am running 21.02-RELEASE-p1 on an SG-1100 for a very small business. This device is pretty much right out of the box. I have simply configured WAN, LAN, and added a few OpenVPN servers. I really depend on Open VPN, but this device is starting to drive me crazy. During the day, it appears to work great!! Then something always happens between 4pm until the next morning at 7am, and is just MIA.
I have to power cycle this unit every single morning to make it run correctly. When it gets to acting up, I cannot connect to the VPN at all from outside the network, inside the network, I cannot even ping the device. It always physically looks good, activity lights flashing, but it appears to not be doing anything.
So I have access to all the logs, but I have no idea what I am looking for. I KNOW that this device is not being overloaded, because it works better during the day with more devices connected to it and using the internet than it does during off hours when no one is here, and it may get the slightest VPN traffic every other day or so.
I am hoping that someone can point me in the right direction to get more uptime. Thank you so much for your time!
-
@tgimagine I suggest you plug into the console port and monitor. If the device is failing or locking up somehow, you should see it via the terminal.
-
FWIW, my pfsense firewall has never had to be rebooted, other than on updates. It's up 24/7 and the last time it was rebooted was over 12 days ago. I suspect yours might be a hardware issue.
-
@nguser6947 Sounds great! Can you tell me exactly what I should be looking for when this happens? I only know enough to be dangerous!
-
@jknott All of my problems keep coming back to this, I really hope so. I am going through the process of getting an RMA now, we will see how that goes!
-
@tgimagine You plug a usb cable from a laptop into the usb port on the back of the pfsense box. Open up putty or some other terminal program, and set the speed to (I think) 115K baud. You should see error messages, reboots, etc. show up on the console window. At least, I think so. It's been a while since I had to monitor mine that way.
-
@nguser6947
Is correct. 115200/8/N/1 according to the documentation.
On a FreeBSD box, from a term window, the following works when you are root:
tip ucom1 -115200Hit enter and you'll get a menu of "stuff".
If you select "Shell" you'll be able to poke around a bit, look at log files, etc.Simply unplug the cable to disconnect the session.
-
Specifically on the SG-1100:
https://docs.netgate.com/pfsense/en/latest/solutions/sg-1100/connect-to-console.htmlIs it completely unresponsive when this happens?
No longer passing any traffic?
Steve
-
The matching thread on reddit for this says he already started the rma process.
