LAN access lost when pfSense WAN interface down
-
So right now, if I loose my WAN connection, I seem unable to reach my pfSense or VM. It's like I loose all LAN access.
I have confirmed that I have a valid DHCP configuration.
Any ideas, super strange.
-
Can you still pull a new dhcp lease?
Can you connect at all? SSH? Ping? ARP?
Can you connect out on LAN from the console?
Steve
-
@stephenw10 I seem to get DHCP.
Cannot Ping and do not have SSH enabled.
I was thinking maybe it could be something to do with the interfaces in windows on my VM host, maybe I should set the LAN interface with a higher metric then the WAN interface?
Strange
-
Mmm, yup sounds like it could be a hypervisor issue.
What can the pfSense VM connect out to from the the console? Other VMs? Things on LAN?
-
@stephenw10 well yea, through the LAN interface we have full local access to the LAN, WAN is a single upstream gateway device.
-
So you can connect out from LAN no problem but nothing can connect in when this happens?
The only thing I could imagine doing that might be if the LAN rules all have a gateway set and you have 'skip rules when gateway down' checked.
You would have to have disabled the anti lockout rules too though since they will always allow access to the webgui.
Steve
-
@stephenw10 yea strange, and it should be straigh layer 2 traffic to the router, not even being filtered.
Yet I cannot reach anything on the LAN.
Since restoring my WAN, everything is back to normal.
-
@deanfourie said in LAN access lost when pfSense WAN interface down:
Yet I cannot reach anything on the LAN.
I'm still unclear, is that connecting out from pfSense to other things in the LAN subnet?
If so that can only really be some hypervisor issue.
Steve
-
@stephenw10 No, that is directly connect to wifi on the LAN!
Literally Layer 2
-
Oh, you mean you can't even connect to LAN hosts from other LAN hosts?
Yeah that never goes through pfSense so definitely a problem at a lower layer somewhere.
Steve
