Gateway offline, Packetloss
-
This post is deleted! -
What do mean by 'the routers local IP'? By default it monitors the gateway IP which will be the ISPs gateway, the 122.x.x.1 address.
Since that may be objecting you can either set it to something external like 8.8.8.8 or disable gateway monitoring.I don't actually think that's the issue since sending an ARP query would not clear that block if it were.
Steve
-
@stephenw10 okay i will try it again, i m sorry i got it wrong.
-
@stephenw10 it was showing online when i by mistake made the monitor ip to routers ip. But as soon as i change the ip to 8.8.8.8 the gateway went offline.
-
Ok, so try deleting the gateway ARP entry and see if that restores connectivity temporarily.
-
@stephenw10 Right trying… Cleared only the Gateway IP and now restarting the router.
-
@stephenw10 Deleted the ARP Table, it restored the table and still not working. Still offline.
-
Hmm, you might check it's actually sending it.
If you run a packet capture on WAN and filter by ARP and the gateway IP then I expct that to see the ARP renewal sent by pfSense.
With the pcap running delete the entry for the gateway in the ARP table. If you refresh the page I expect it to be immediately replaced.
The pcap should then have the ARP request and reply shown.In your previous pcap that immediately restarted traffic.
The only other scenario that comes to mind that present like that is if the ARP entry in pfSense is wrong for some reason. But the pcap shows it sending to the correct MAC.
Steve
-
@stephenw10 Okay! I m confused sir, what to do?
-
What can i do to replace the mac address for the gateway ?
-
The MAC for the gateway should appear in the ARP table immediately unless the gateway doesn't reply to the ARP query. It did reply though in the pcap you uploaded. Both times pfSense queried it. You shouldn't need to do anything there.
-
@stephenw10 The ARP table detected the hostname for a sec of the ISP, but then it disappeared again.
-
The hostname doesn't matter, only the MAC and IP address are important.
-
Okay but then how will this issue solve ?
-
It won't. You need to make sure pfSense is actually sending the ARP query when you remove the entry fro the table. That's why you are running the pcap and filtering for ARP and the gateway IP.
If your previous pcap the gateway starts to respond each time pfSense sends that query.
-
If it does then one thing we could do it set the ARP timeout much shorter. That would be a workaround though, it shouldn't be required.
sysctl net.link.ether.inet.max_age=300Steve
-
@stephenw10 Can you help me a bit sir, I don't know much about it. I deleted the gateway entry from the ARP table, what to do now ?
-
After deleting the ARP table the gateway shows as incomplete mac address.
-
Run a pcap and see what's happening. If it shows as incomplete in the ARP table that means pfSense is ARPing and the gateway isn't replying, which is not what was happening in the last pcap.
-
@stephenw10 i ll run a packet capture and send you the file in some time.
