Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    WAN interface gets stuck in loop changing state from UP to DOWN

    General pfSense Questions
    4
    12
    1.2k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      Bizbot
      last edited by

      Hello pfSense Community,

      I am running into an issue with my pfSense box whereby the WAN interface gets stuck in a loop changing it's state from UP to DOWN rapidly. A few seconds UP and Internet functions, a few second DOWN and the Internet is inaccessible, over and over and over. When this happens it will do it for hours. Restarting the box seems to have always resolved the problem.

      I have troubleshot the WAN connection and it seems the issue is related to the pfSense box itself. Swapping out to a cheap router I have during this behavior has show there is no issue with the WAN link.

      The box is running 2.6.0-RELEASE (amd64) with a very basic config. No packages installed outside of the stock base roll out.

      The computer is a Dell Optiplex 3020 with a Intel I350T4V2BLK RJ45 PCI-Express OEM 4-Port Ethernet Server Adapter Gigabit installed.

      Does anyone have any ideas? Logs attached. pf.txt Please let me know any further information that would be helpful. Happy to provide. I truly love pfSense and hopefully can resolve this minor annoyance.

      pf1.jpg
      pf2.jpg

      "I like offending people because I think people who get offended, should be offended."
      -Linus Torvald

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        What's the WAN connected to?

        Sounds like an link negotiation issue. You could try setting a fixed link speed-duplex on WAN. If whatever it's connected to allows that it may work. Otherwise I would try putting a switch in between as a test.

        Steve

        B 1 Reply Last reply Reply Quote 0
        • B
          Bizbot @stephenw10
          last edited by Bizbot

          @stephenw10

          WAN interface is connected to a Spectrum provided ET2251.

          I have tried setting a fixed link speed on the interface and the provider equipment did not seem to like that. The auto-negotiation works fine 95% of the time. Very odd.

          "I like offending people because I think people who get offended, should be offended."
          -Linus Torvald

          M stephenw10S 2 Replies Last reply Reply Quote 0
          • M
            michmoor LAYER 8 Rebel Alliance @Bizbot
            last edited by

            @bizbot Physical layer issue. Tried changing the cabling as well?

            Firewall: NetGate,Palo Alto-VM,Juniper SRX
            Routing: Juniper, Arista, Cisco
            Switching: Juniper, Arista, Cisco
            Wireless: Unifi, Aruba IAP
            JNCIP,CCNP Enterprise

            B 1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator @Bizbot
              last edited by

              @bizbot said in WAN interface gets stuck in loop changing state from UP to DOWN:

              I have tried setting a fixed link speed on the interface and the provider equipment did not seem to like that.

              Did it fail to link at all? Can you set the link speed in the modem/router?

              1 Reply Last reply Reply Quote 0
              • B
                Bizbot @michmoor
                last edited by

                @michmoor I did replace the ethernet cable with a know good cable.

                "I like offending people because I think people who get offended, should be offended."
                -Linus Torvald

                1 Reply Last reply Reply Quote 0
                • T
                  Tzvia
                  last edited by

                  I also had the same problem. Also have Spectrum with a EN2251 modem (Hitron). This is the modem with the analog phone line option. It has a 2.5gig ethernet. It works fine if I connect it to a small cheap switch, then connect my router to the switch, but if I connect the two directly to each other, I have to reboot the PFSense box then it seems to connect. But if something cuts the power to the modem, it goes back to the connect/disconnect so I feel better just leaving the stupid switch in place.

                  Tzvia

                  Current build:
                  Hunsn/CWWK Pentium Gold 8505, 6x i226v 'micro firewall'
                  16 gigs ram
                  500gig WD Blue nvme
                  Using modded BIOS (enabled CSTATES)
                  PFSense 2.72-RELEASE
                  Enabled Intel SpeedShift
                  Snort
                  PFBlockerNG
                  LAN and 5 VLANS

                  B 1 Reply Last reply Reply Quote 0
                  • B
                    Bizbot @Tzvia
                    last edited by

                    @tzvia Thank you for the insight and that is what I am starting to expect is the issue. A Spectrum related problem that has no resolution. I already had a tech come out and replace my unit with a "brand new" one to no avail.

                    "I like offending people because I think people who get offended, should be offended."
                    -Linus Torvald

                    1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      No way to set a fixed link speed in the 'modem'?

                      Many 2.5GbE NIC do not support that anyway though. You might have more luck using a 2.5G NIC in pfSense. But a 5 port switch will be cheaper. At least test a switch in there first.

                      T 1 Reply Last reply Reply Quote 0
                      • T
                        Tzvia @stephenw10
                        last edited by

                        @stephenw10 Yea I was thinking about that but I don't have the login for it... figured it wouldn't work any way. Maybe in the future I will get the 'bug' to build something again with 2.5gig NICs instead of using a turnkey mini PC, but right now I am enjoying the silence and low power drain of the little box in my sig...

                        Tzvia

                        Current build:
                        Hunsn/CWWK Pentium Gold 8505, 6x i226v 'micro firewall'
                        16 gigs ram
                        500gig WD Blue nvme
                        Using modded BIOS (enabled CSTATES)
                        PFSense 2.72-RELEASE
                        Enabled Intel SpeedShift
                        Snort
                        PFBlockerNG
                        LAN and 5 VLANS

                        B 1 Reply Last reply Reply Quote 0
                        • B
                          Bizbot @Tzvia
                          last edited by Bizbot

                          @tzvia Spectrum gives you zero access to the GUI nowadays unfortunately. Gotta love it!

                          "I like offending people because I think people who get offended, should be offended."
                          -Linus Torvald

                          1 Reply Last reply Reply Quote 0
                          • stephenw10S
                            stephenw10 Netgate Administrator
                            last edited by

                            Boooo!

                            1 Reply Last reply Reply Quote 1
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.