Netgate 1537 Goes Offline for 30 Secs After Configuration Change Applies
-
I'm setting up a Netgate 1537 with 23.09.1-RELEASE (amd64) | built on Wed Dec 6 15:22:00 EST 2023 | FreeBSD 14.0-CURRENT (installed via image, not upgrade).
When I make any configuration changes to the DNS Resolver, it appears that the system freezes, the services are stopped/paused as I lose all connectivity, and it comes back up 30 seconds later. It also happens when making configuration changes to ISC DHCP service.
I've used this very appliance before prior to the major revision update and don't recall this being the behavior. I am not sure where to look to see why this is happening and how to resolve it. I'd appreciate any assistance!
-
I'm guessing this is not typical. If anyone could point me in the right direction on resolving this issue, it would be greatly appreciated.
-
No I wouldn't expect that.
How are you connected to it?
What do you see logged after that?
Steve
-
@stephenw10 Thanks for the reply. I'm not sure what you mean by how I am connected to it, but via the network. I access the GUI via the assigned VLAN I have configured on the interface over my home network. FWIW, I've tested this directly connected to firewall and the results were the same.
As far as the logs, I have not seen anything within the general system logs that warranted attention for this issue I am having.
-
I mean are you just connected to the LAN dircetly or via something that might be affected by a reload like over VPN for example?
Do you see logs reflecting the 30s time period though even if they are not errors? Like Unbound restarts and loads completely after 30s maybe.
-
@stephenw10 I am directly connected on the LAN, no VPN or anything like that.
Here is a screenshot of the logs between an arbitrary change in unbound that triggered the issue until it came back up:
-
Hmm, nothing very unexpected there.
So during that time you can't access the pfSense webgui?
Can you access anything through the firewall at that time? Or ping the firewall?
-
@stephenw10 the entire appliance seems to become non-functional within that time and then comes back up, every time. I lose all network connectivity in the meantime. No access to gui, ip resources or anything. I can't even ping the FW.
-
Hmm, is that on all interfaces?
If you try pinging out from the firewall itself does that also fail?
About the only thing that might make it behave like that would be if it reconfigured all the interfaces. Even then it wouldn't normally take 30s.
-
@stephenw10 its all interfaces, including that wan. The entire thing goes dark.
-
Hmm, bizarre.
Is that a clean config/upgrade or something that has old config from some much older version?
I would consider reinstalling 23.09.1 clean to be sure it's not hitting something old.
-
@stephenw10 it's a clean re-image of the system, config built from the ground up. I thought there would be a diagnostic I could download or something that someone could take a look at to see what is going on but I guess I'll have to go the route of re-imaging the fw.
-
If it's a clean install it shouldn't make any difference.
Is even the console unresponsive?
If it isn't try hitting
ctl+t
to see what it's waiting for. -
@stephenw10 ended up factory resetting and rebuilding from scratch. Had to do factory reset it twice, but the behavior is now gone. Thank you.
Mind giving some of comments upvotes? I am running into another issue which I am attempting to create another post on in a different section of the forum, but I am hitting the spam blocker.