• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Not getting a DHCP WAN IP Address on netgate hardware.

Scheduled Pinned Locked Moved General pfSense Questions
47 Posts 6 Posters 6.5k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • S
    stephenw10 Netgate Administrator
    last edited by Sep 6, 2023, 11:30 AM

    Mmm, that's a good point. Looking at the logs you posted I see ix3 go down when you disconnected it from the other router (presumably) but I do not see it ever go up again.

    Do you actually see link LEDs when it's directly connected to the ONT?

    A 2 Replies Last reply Sep 6, 2023, 12:03 PM Reply Quote 0
    • A
      Austin 0 @stephenw10
      last edited by Sep 6, 2023, 12:03 PM

      @stephenw10 You are correct that it goes down when unplugged from the other router. I will check for those link lights as soon as I am able. (Which will most likely be Friday or Saturday.)

      1 Reply Last reply Reply Quote 1
      • A
        Austin 0 @stephenw10
        last edited by Sep 10, 2023, 4:15 PM

        @stephenw10 The activity lights do not come on when plugged directly into the ONT.

        1 Reply Last reply Reply Quote 0
        • S
          stephenw10 Netgate Administrator
          last edited by Sep 10, 2023, 6:40 PM

          Ok, what does the ONT link at when connected to something else? It may be set to a fixed link rate. Though I would expect the 1100 to link to that since the WAN is a switch port.

          Can you try putting a switch in between?

          A 1 Reply Last reply Sep 10, 2023, 9:20 PM Reply Quote 0
          • A
            Austin 0 @stephenw10
            last edited by Sep 10, 2023, 9:20 PM

            @stephenw10 Thank you for the suggestion. I connected to my main switch on a separate VLAN. That did in fact work correctly. The ONT connection set itself to 100Base-T. I did try setting that speed for the WAN connection in PFSense and then plugging it directly in, however that once again resulted in no Link lights. I would like to not have to run the connection through the switch, but this at least better than where I started.

            1 Reply Last reply Reply Quote 0
            • S
              stephenw10 Netgate Administrator
              last edited by Sep 10, 2023, 9:38 PM

              This is using the 4100? The NICs there would have issues connecting to something at a fixed speed, probably what you're seeing.

              An 1100 there should work though, you can set the switch ports to 100M fixed.

              A 1 Reply Last reply Sep 10, 2023, 9:39 PM Reply Quote 0
              • A
                Austin 0 @stephenw10
                last edited by Sep 10, 2023, 9:39 PM

                @stephenw10 Is there any way around this issue, other than putting the switch in between them?

                R A 2 Replies Last reply Sep 10, 2023, 9:51 PM Reply Quote 1
                • R
                  rcoleman-netgate Netgate @Austin 0
                  last edited by Sep 10, 2023, 9:51 PM

                  @Austin-0 Not one that we have any means to effect. The ISP is the one with the hardware that needs to play ball.

                  Ryan
                  Repeat, after me: MESH IS THE DEVIL! MESH IS THE DEVIL!
                  Requesting firmware for your Netgate device? https://go.netgate.com
                  Switching: Mikrotik, Netgear, Extreme
                  Wireless: Aruba, Ubiquiti

                  1 Reply Last reply Reply Quote 0
                  • A
                    Austin 0 @Austin 0
                    last edited by Austin 0 Sep 10, 2023, 10:37 PM Sep 10, 2023, 10:16 PM

                    @Austin-0 Looks like I spoke too soon. It worked for 5-10 minutes or so and then I got 100% packet loss according to the gateway monitor. I rebooted, and the same thing happened. It worked for 5-10 minutes and then it was dropping all of the packets. Below are the logs from after the reboot. As you can see, It came back up from the reboot at 16:38, and dpinger sent the alarm at 16:45.

                    System Logs 2023-09-10.png

                    S 1 Reply Last reply Sep 10, 2023, 10:40 PM Reply Quote 0
                    • S
                      stephenw10 Netgate Administrator
                      last edited by Sep 10, 2023, 10:17 PM

                      For the 4100 specifically?

                      A 1 Reply Last reply Sep 10, 2023, 10:20 PM Reply Quote 0
                      • A
                        Austin 0 @stephenw10
                        last edited by Sep 10, 2023, 10:20 PM

                        @stephenw10 Yes

                        1 Reply Last reply Reply Quote 0
                        • S
                          stephenw10 Netgate Administrator @Austin 0
                          last edited by Sep 10, 2023, 10:40 PM

                          @Austin-0 said in Not getting a DHCP WAN IP Address on netgate hardware.:

                          Looks like I spoke too soon

                          Did the switch lose link? pfSense only shows the pings to 1.1.1.1 started to fail.

                          A 1 Reply Last reply Sep 10, 2023, 10:44 PM Reply Quote 0
                          • A
                            Austin 0 @stephenw10
                            last edited by Sep 10, 2023, 10:44 PM

                            @stephenw10 The switch did not lose the link. 1.1.1.1 is what I have gateway monitoring set to. However I can confirm that all internet access was lost at that time, not just to 1.1.1.1.

                            1 Reply Last reply Reply Quote 0
                            • S
                              stephenw10 Netgate Administrator
                              last edited by Sep 10, 2023, 11:28 PM

                              Even to the actual gateway? Is it still in the ARP table?

                              A 1 Reply Last reply Sep 10, 2023, 11:46 PM Reply Quote 0
                              • A
                                Austin 0 @stephenw10
                                last edited by Austin 0 Sep 10, 2023, 11:46 PM Sep 10, 2023, 11:46 PM

                                @stephenw10 I ran a tracert from one of the computers at the time of the failure and it only got to the Pfsense box so yes even the connection to the gateway was down. As far as the ARP table goes I have unfortunately left the building, and I won't be back until at least Friday. I will test it again asap and look at the ARP table this time.

                                1 Reply Last reply Reply Quote 0
                                • S
                                  stephenw10 Netgate Administrator
                                  last edited by Sep 11, 2023, 12:03 AM

                                  The ISP gateway may not appear in a traceroute. If you've tried it before and it did of course it still should.

                                  A J 2 Replies Last reply Sep 16, 2023, 6:25 PM Reply Quote 0
                                  • A
                                    Austin 0 @stephenw10
                                    last edited by Sep 16, 2023, 6:25 PM

                                    @stephenw10 Okay I have confirmed that the ISP gateway does appear in tracerts normally. Also, the ISP gateway stays in the arp table.

                                    1 Reply Last reply Reply Quote 0
                                    • S
                                      stephenw10 Netgate Administrator
                                      last edited by Sep 16, 2023, 9:34 PM

                                      Hmm, hard to say then. pfSense still has an IP on the WAN I assume? But it cannot ping the WAN gateway even though it's in the ARP table?

                                      Do you see the pings in a pcap on WAN?

                                      Works for a few minutes then stops sure seems like it could be an ARP issue.

                                      A 1 Reply Last reply Sep 17, 2023, 3:53 PM Reply Quote 0
                                      • A
                                        Austin 0 @stephenw10
                                        last edited by Austin 0 Sep 17, 2023, 3:56 PM Sep 17, 2023, 3:53 PM

                                        @stephenw10 Here is the packet capture. I have replaced the public IP with xxx.xxx.xxx.xxx. You can see the ICMP requests that dpringer is making to 1.1.1.1. I noticed a lot of these are getting flagged for bad checksum, but I am not quite sure what to do about that.

                                        10:45:51.905405 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 77: (tos 0x0, ttl 127, id 38590, offset 0, flags [none], proto UDP (17), length 63, bad cksum 0 (->861d)!)
                                            xxx.xxx.xxx.xxx.35343 > 1.1.1.1.53: [udp sum ok] 49570+ A? forum.netgate.com. (35)
                                        10:45:51.905451 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 77: (tos 0x0, ttl 127, id 38591, offset 0, flags [none], proto UDP (17), length 63, bad cksum 0 (->861c)!)
                                            xxx.xxx.xxx.xxx.42560 > 1.1.1.1.53: [udp sum ok] 51250+ Type65? forum.netgate.com. (35)
                                        10:45:51.921752 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 83: (tos 0x0, ttl 127, id 38592, offset 0, flags [none], proto UDP (17), length 69, bad cksum 0 (->8615)!)
                                            xxx.xxx.xxx.xxx.60130 > 1.1.1.1.53: [udp sum ok] 19119+ A? signaler-pa.youtube.com. (41)
                                        10:45:51.921848 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 83: (tos 0x0, ttl 127, id 38593, offset 0, flags [none], proto UDP (17), length 69, bad cksum 0 (->8614)!)
                                            xxx.xxx.xxx.xxx.19205 > 1.1.1.1.53: [udp sum ok] 21591+ Type65? signaler-pa.youtube.com. (41)
                                        10:45:51.934131 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 21954, offset 0, flags [DF], proto TCP (6), length 40, bad cksum 0 (->c8e1)!)
                                            xxx.xxx.xxx.xxx.8358 > 52.226.139.121.443: Flags [R.], cksum 0xb229 (correct), seq 3206783296, ack 1699559528, win 0, length 0
                                        10:45:52.200962 60:22:32:46:45:0d > 01:80:c2:00:00:00, 802.3, length 39: LLC, dsap STP (0x42) Individual, ssap STP (0x42) Command, ctrl 0x03: STP 802.1w, Rapid STP, Flags [Learn, Forward, Agreement], bridge-id 8000.60:22:32:46:45:0c.8010, length 43
                                        	message-age 0.00s, max-age 20.00s, hello-time 2.00s, forwarding-delay 15.00s
                                        	root-id 8000.60:22:32:46:45:0c, root-pathcost 0, port-role Designated
                                        10:45:52.216361 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 43: (tos 0x0, ttl 64, id 63816, offset 0, flags [none], proto ICMP (1), length 29, bad cksum 0 (->62c5)!)
                                            xxx.xxx.xxx.xxx > 1.1.1.1: ICMP echo request, id 47797, seq 1577, length 9
                                        10:45:52.240408 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 86: (tos 0x0, ttl 64, id 15133, offset 0, flags [none], proto UDP (17), length 72, bad cksum 0 (->12a8)!)
                                            xxx.xxx.xxx.xxx.6424 > 8.8.8.8.53: [bad udp cksum 0x2d26 -> 0xc857!] 13895+ PTR? 8.179.243.104.in-addr.arpa. (44)
                                        10:45:52.297247 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 55: (tos 0x0, ttl 127, id 13743, offset 0, flags [DF], proto TCP (6), length 41, bad cksum 0 (->d40b)!)
                                            xxx.xxx.xxx.xxx.50716 > 172.64.41.3.443: Flags [.], cksum 0x25e3 (correct), seq 110458962:110458963, ack 572074752, win 1028, length 1
                                        10:45:52.720360 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 43: (tos 0x0, ttl 64, id 23499, offset 0, flags [none], proto ICMP (1), length 29, bad cksum 0 (->43)!)
                                            xxx.xxx.xxx.xxx > 1.1.1.1: ICMP echo request, id 47797, seq 1578, length 9
                                        10:45:52.835580 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 1514: (tos 0x0, ttl 63, id 57232, offset 0, flags [DF], proto TCP (6), length 1500, bad cksum 0 (->4b70)!)
                                            xxx.xxx.xxx.xxx.25868 > 3.95.234.235.30011: Flags [.], cksum 0x1094 (correct), seq 707216205:707217653, ack 148236916, win 166, options [nop,nop,TS val 35204921 ecr 94619178], length 1448
                                        10:45:52.835654 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 1514: (tos 0x0, ttl 63, id 57233, offset 0, flags [DF], proto TCP (6), length 1500, bad cksum 0 (->4b6f)!)
                                            xxx.xxx.xxx.xxx.25868 > 3.95.234.235.30011: Flags [.], cksum 0x7d8e (correct), seq 1448:2896, ack 1, win 166, options [nop,nop,TS val 35204921 ecr 94619178], length 1448
                                        10:45:52.835665 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 1514: (tos 0x0, ttl 63, id 57234, offset 0, flags [DF], proto TCP (6), length 1500, bad cksum 0 (->4b6e)!)
                                            xxx.xxx.xxx.xxx.25868 > 3.95.234.235.30011: Flags [.], cksum 0x77e6 (correct), seq 2896:4344, ack 1, win 166, options [nop,nop,TS val 35204921 ecr 94619178], length 1448
                                        10:45:52.835779 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 1461: (tos 0x0, ttl 63, id 57235, offset 0, flags [DF], proto TCP (6), length 1447, bad cksum 0 (->4ba2)!)
                                            xxx.xxx.xxx.xxx.25868 > 3.95.234.235.30011: Flags [P.], cksum 0x5acb (correct), seq 4344:5739, ack 1, win 166, options [nop,nop,TS val 35204921 ecr 94619178], length 1395
                                        10:45:52.871216 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 70: (tos 0x0, ttl 127, id 47650, offset 0, flags [none], proto UDP (17), length 56, bad cksum 0 (->54b2)!)
                                            xxx.xxx.xxx.xxx.7567 > 8.8.8.8.53: [udp sum ok] 57083+ A? dns.google. (28)
                                        10:45:52.871224 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 70: (tos 0x0, ttl 127, id 38594, offset 0, flags [none], proto UDP (17), length 56, bad cksum 0 (->8620)!)
                                            xxx.xxx.xxx.xxx.40601 > 1.1.1.1.53: [udp sum ok] 57083+ A? dns.google. (28)
                                        10:45:52.918662 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 70: (tos 0x0, ttl 127, id 47651, offset 0, flags [none], proto UDP (17), length 56, bad cksum 0 (->54b1)!)
                                            xxx.xxx.xxx.xxx.31362 > 8.8.8.8.53: [udp sum ok] 54725+ A? dns.google. (28)
                                        10:45:52.918707 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 70: (tos 0x0, ttl 127, id 47652, offset 0, flags [none], proto UDP (17), length 56, bad cksum 0 (->54b0)!)
                                            xxx.xxx.xxx.xxx.8219 > 8.8.8.8.53: [udp sum ok] 16179+ Type65? dns.google. (28)
                                        10:45:52.919544 90:ec:77:34:73:8e > 78:ba:f9:30:82:33, ethertype IPv4 (0x0800), length 77: (tos 0x0, ttl 127, id 47653, offset 0, flags [none], proto UDP (17), length 63, bad cksum 0 (->54a8)!)
                                        
                                        1 Reply Last reply Reply Quote 0
                                        • S
                                          stephenw10 Netgate Administrator
                                          last edited by Sep 17, 2023, 5:13 PM

                                          Mmm, nothing coming back from the gateway at all though.

                                          The checksum errors are because hardware checksum off-loading is enabled. That's not a problem but you can disable it in Sys > Adv > Networking

                                          A 1 Reply Last reply Sep 17, 2023, 9:18 PM Reply Quote 0
                                          28 out of 47
                                          • First post
                                            28/47
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
                                            This community forum collects and processes your personal information.
                                            consent.not_received