<![CDATA[Gateway has 100% WAN packet loss but is online]]>On Status → Monitoring I have set up this graph:
Screenshot 2023-01-21 at 10.10.35 AM.png

100% packet loss should mean that the connection is dead. Yet, I can connect to that gateway via OpenVPN, and the client has not complained about internet availability, or, rather, unavailability of it. What is the explanation for this discrepancy?

]]>https://forum.netgate.com/topic/177263/gateway-has-100-wan-packet-loss-but-is-onlineRSS for NodeTue, 14 Apr 2026 08:49:58 GMTSat, 21 Jan 2023 15:22:10 GMT60<![CDATA[Reply to Gateway has 100% WAN packet loss but is online on Wed, 25 Jan 2023 16:12:20 GMT]]>@dominikhoffmann said in Gateway has 100% WAN packet loss but is online:

I can ssh into the WAN address the gateway reports, from outside of the LAN.

I don't think that really answers the question. [Also, it seem strange that you would be able to ssh into the gateway?]

When you look in VPN > OpenVPN > Servers, what are the Tunnel Networks?

When you look in Status > Gateways, what are the addresses being monitored?

]]>https://forum.netgate.com/post/1082261https://forum.netgate.com/post/1082261Wed, 25 Jan 2023 16:12:20 GMT<![CDATA[Reply to Gateway has 100% WAN packet loss but is online on Wed, 25 Jan 2023 04:57:04 GMT]]>@dennypage: Not that there is any evidence of it. I can ssh into the WAN address the gateway reports, from outside of the LAN.

]]>https://forum.netgate.com/post/1082201https://forum.netgate.com/post/1082201Wed, 25 Jan 2023 04:57:04 GMT<![CDATA[Reply to Gateway has 100% WAN packet loss but is online on Tue, 24 Jan 2023 01:08:02 GMT]]>I don't suppose that your ISP is using a private address space for the last hop, and that their address space has some area of overlap with the address space used by the OpenVPN tunnels?

I know, it's a silly question, but I had to ask.

]]>https://forum.netgate.com/post/1082014https://forum.netgate.com/post/1082014Tue, 24 Jan 2023 01:08:02 GMT<![CDATA[Reply to Gateway has 100% WAN packet loss but is online on Tue, 24 Jan 2023 00:16:42 GMT]]>Hmm, it may be restarting gateway monitoring then. I would restart the server again as you did last time then check the system log to see exactly what's happening when you do.

Steve

]]>https://forum.netgate.com/post/1082006https://forum.netgate.com/post/1082006Tue, 24 Jan 2023 00:16:42 GMT<![CDATA[Reply to Gateway has 100% WAN packet loss but is online on Tue, 24 Jan 2023 00:01:46 GMT]]>@stephenw10: Yes, it is running on the same WAN.

I believe, you mean to ask, whether there is an OpenVPN server interface? Yes:

Screenshot 2023-01-23 at 6.59.54 PM.png

]]>https://forum.netgate.com/post/1082003https://forum.netgate.com/post/1082003Tue, 24 Jan 2023 00:01:46 GMT<![CDATA[Reply to Gateway has 100% WAN packet loss but is online on Mon, 23 Jan 2023 00:38:30 GMT]]>I assume that server is running on the same WAN?
I'm not sure why that would have restarted dpinger there though.

Is the server interface assigned?

Steve

]]>https://forum.netgate.com/post/1081767https://forum.netgate.com/post/1081767Mon, 23 Jan 2023 00:38:30 GMT<![CDATA[Reply to Gateway has 100% WAN packet loss but is online on Sun, 22 Jan 2023 20:52:27 GMT]]>Screenshot 2023-01-22 at 3.45.54 PM.png

The time it went back to 0 is coincident with when I restarted the OpenVPN server on the gateway. See also my post about the stability of the OpenVPN code.

]]>https://forum.netgate.com/post/1081748https://forum.netgate.com/post/1081748Sun, 22 Jan 2023 20:52:27 GMT<![CDATA[Reply to Gateway has 100% WAN packet loss but is online on Sun, 22 Jan 2023 20:43:57 GMT]]>Yes, if that's the only gateway defined on the firewall it will always be the default route even if the monitoring stops replying. It's probably your ISP blocking the ping traffic after some time. Try setting an external monitoring IP.

]]>https://forum.netgate.com/post/1081746https://forum.netgate.com/post/1081746Sun, 22 Jan 2023 20:43:57 GMT<![CDATA[Reply to Gateway has 100% WAN packet loss but is online on Sat, 21 Jan 2023 17:39:15 GMT]]>@dominikhoffmann [Assuming that you have a single WAN connection...] This would imply that the IP address you are using to monitor is no longer responding to ICMP or is no longer reachable from your system.

]]>https://forum.netgate.com/post/1081621https://forum.netgate.com/post/1081621Sat, 21 Jan 2023 17:39:15 GMT