Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multiple issues, firewall freezes and whole network goes down.

    Scheduled Pinned Locked Moved
    General pfSense Questions
    4
    55
    1.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • LaxarusL
      Laxarus @stephenw10
      last edited by

      @stephenw10 hmm, I will try that during the weekend. No time to test it right now. Thanks for the suggestion. However, by logic, does it matter whether it is dhcp or static?

      According to this recipe, it does recommend "static".

      https://docs.netgate.com/pfsense/en/latest/recipes/modem-access.html

      Now that I think about it:

      My WAN IP is 88.....
      and my WAN_PPPOE is 10......
      For some reason, they are different and I am not behind CGNAT.
      Does enabling "Use non-local gateway" on one of these gateways will make a difference? I am not exactly sure what this option does and which gateway it should be enabled?

      2eccf428-2933-4361-9221-993032ed77fd-image.png

      1 Reply Last reply Reply Quote 0
      • stephenw10S
        stephenw10 Netgate Administrator
        last edited by

        Yes, use static there if you can. When you set it as dhcp the server passes it a gateway to use and pfSense sets that on the interface turning it into a WAN. Then it triggers all the WAN IP scripts when it bounces.

        LaxarusL 1 Reply Last reply Reply Quote 0
        • LaxarusL
          Laxarus @stephenw10
          last edited by

          @stephenw10 Okay, I set it up as static now. Let's see if it will survive the scheduled restart of Modem on Monday.
          Now that you have reminded me, I have another interface (network) which is not WAN but with a DHCP gateway. It is connected to a switch (This switch connects all IPMI devices together in one network with elevated privilidges). The switch acts as a DHCP server. By this logic, should I also set this up as static?

          The MNG interface below.

          b06ca774-6073-4ed3-a3a7-5e212873d5e9-image.png

          729498a0-92df-4618-b5b7-694481122cf4-image.png

          1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            You could also change that but it won't be nearly as impactful because it's on a different NIC. It shouldn't lose link at the same time.

            LaxarusL 1 Reply Last reply Reply Quote 0
            • LaxarusL
              Laxarus @stephenw10
              last edited by

              @stephenw10 Survived the Monday but will monitor it for changes.

              Just curious is there a way to mark the DHCP gateway as local only instead of WAN or this default behavir cannot be changed?

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                The only way you can do that is to add a gateway separately to an interface config like you might with an internal router for example. But you can't do that for a dynamic interface type like DHCP. The server passes a gateway to the client to use and it is always added to the gateway.
                You could maybe override the gateway that is passed in the advanced dhcp options. I'm not sure I've ever tried that.

                LaxarusL 1 Reply Last reply Reply Quote 0
                • LaxarusL
                  Laxarus @stephenw10
                  last edited by

                  @stephenw10 so far nothing crashed yet with static IP.
                  I am guessing this is a very rare problem since you have to have pppoe DSL (most uses fiber these days) and configured the network to be able to access modem behind WAN via DHCP.
                  I will continue monitoring.

                  There is no option that suggests to mark the gateway as internal network only. Maybe checking the boxes for "Disable Gateway Monitoring", "Disable Gateway Monitoring Action", and "Do not add static route for gateway monitor IP address via the chosen interface" might achieve a similar result but I dont want to try these for now.
                  Still no idea for the exact use case of "Use non-local gateway" option.

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by stephenw10

                    You would have to use the DHCP advanced options field to force the dhcp client to ignore the gateway passed by the server. So adding supersede routers in the Option modifiers field should do it.

                    But I would just use a static IP here.

                    1 Reply Last reply Reply Quote 0
                    • JonathanLeeJ
                      JonathanLee @Laxarus
                      last edited by JonathanLee

                      @Laxarus Your traffic shaper is that required? That could be configured incorrectly.

                      https://forum.netgate.com/topic/171842/queue-management-algorithms-differences

                      Make sure to upvote

                      LaxarusL 1 Reply Last reply Reply Quote 0
                      • LaxarusL
                        Laxarus @JonathanLee
                        last edited by Laxarus

                        @JonathanLee said in Multiple issues, firewall freezes and whole network goes down.:

                        https://forum.netgate.com/topic/171842/queue-management-algorithms-differences

                        My main interface is on 2x25G LAGG and LAGG is not supported with traffic shaper so other than bufferbloat nothing is set there.

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post