Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    LAN access lost when pfSense WAN interface down

    Scheduled Pinned Locked Moved General pfSense Questions
    10 Posts 2 Posters 928 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      deanfourie
      last edited by

      So right now, if I loose my WAN connection, I seem unable to reach my pfSense or VM. It's like I loose all LAN access.

      I have confirmed that I have a valid DHCP configuration.

      Any ideas, super strange.

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Can you still pull a new dhcp lease?

        Can you connect at all? SSH? Ping? ARP?

        Can you connect out on LAN from the console?

        Steve

        D 1 Reply Last reply Reply Quote 0
        • D
          deanfourie @stephenw10
          last edited by

          @stephenw10 I seem to get DHCP.

          Cannot Ping and do not have SSH enabled.

          I was thinking maybe it could be something to do with the interfaces in windows on my VM host, maybe I should set the LAN interface with a higher metric then the WAN interface?

          Strange

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Mmm, yup sounds like it could be a hypervisor issue.

            What can the pfSense VM connect out to from the the console? Other VMs? Things on LAN?

            D 1 Reply Last reply Reply Quote 0
            • D
              deanfourie @stephenw10
              last edited by

              @stephenw10 well yea, through the LAN interface we have full local access to the LAN, WAN is a single upstream gateway device.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                So you can connect out from LAN no problem but nothing can connect in when this happens?

                The only thing I could imagine doing that might be if the LAN rules all have a gateway set and you have 'skip rules when gateway down' checked.

                You would have to have disabled the anti lockout rules too though since they will always allow access to the webgui.

                Steve

                D 1 Reply Last reply Reply Quote 0
                • D
                  deanfourie @stephenw10
                  last edited by

                  @stephenw10 yea strange, and it should be straigh layer 2 traffic to the router, not even being filtered.

                  Yet I cannot reach anything on the LAN.

                  Since restoring my WAN, everything is back to normal.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    @deanfourie said in LAN access lost when pfSense WAN interface down:

                    Yet I cannot reach anything on the LAN.

                    I'm still unclear, is that connecting out from pfSense to other things in the LAN subnet?

                    If so that can only really be some hypervisor issue.

                    Steve

                    D 1 Reply Last reply Reply Quote 0
                    • D
                      deanfourie @stephenw10
                      last edited by

                      @stephenw10 No, that is directly connect to wifi on the LAN!

                      Literally Layer 2

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        Oh, you mean you can't even connect to LAN hosts from other LAN hosts?

                        Yeah that never goes through pfSense so definitely a problem at a lower layer somewhere.

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.