Netgate 7100-1U New NIC setup issues
-
@stephenw10 im currently out of office but will let you know as soon as i get back / Thanx
-
@stephenw10 how would i start command line
Is it selecting 8 shell ?
Here is my new port settings in console :
Wan >ix0
Lan >ix3
Opt1>lagg0.4090
Opt2>ix1I finally see mac address of router showing in my switch but still no connection devices hooked to switch not connecting -Devices show dhcp lease ip
But not connecting or saying cant get an ip address is it maybe some setting in switch i need to configure ? -
Yes use option 8 from the console menu to reach the command line.
Then run:
ifconfig -vm ix3
Make sure it shows as up and linked.
Unplug the SFP and run that again. Make sure it now shows as down to confirm that's actually the LAN NIC.
Be sure the addresses shown above the menu for WAN and LAN do not conflict.
For example:
Netgate 7100 - Netgate Device ID: ba27a9eaeaeaea439bacb *** Welcome to Netgate pfSense Plus 24.08-DEVELOPMENT (amd64) on 7100 *** Current Boot Environment: default_20240624180133_20240903152424 Next Boot Environment: default_20240624180133_20240903152424 LAN (lan) -> ix2 -> v4: 192.168.88.1/24 OPT1 (opt1) -> ix0 -> WAN (wan) -> lagg0 -> v4/DHCP4: 172.21.16.30/24
-
@stephenw10 how would i tell if wan lan has ip conflict ?
I was wondering while setting this up is it safe to have netgate router wan hooked up directly to isp modem wan that obtains external ip or behind firewall as lan under private ipv4?(netgate router wan to isp modem router lan)
Currently my wan and lan have private ip
As i put netgate wan to isp modem lan behind firewall
Wan -> 192.168.2.1
Lan >192.168.1.200
Is that ok or would it cause issues? Readon i did that is im not sure if firewall is setup properly and dont want to expose router to attacks -
@Sammy2Netgo once i get back i will run the cli and paste the results here /Thanx
-
As long as those subnets are both /24 (or smaller) that's fine.
-
@Sammy2Netgo
I ran the cli with sfp plugged in results :[24,03-RELERSE][root@pfSense.home,arpa]/root: ifconfig -vm ix3
1x3: flags=1008843<UP, BROADCAST, RUNNING,SIMPLEX,MULTICAST, LOWER UP> metric 0 mtu 1500
options=4138bb<RXCSUM,TXCSUM, VLAN_MTU,VLAN_ HUTACGING, JUMBO_MTU, VLAN_ HUCSUM,WOL_UCAST,WOL_MCAST,WOL_MAGIC,VLAN_HUFILTER, RXCSUM_IPV6,TXCSUM_IPV6, HUSTATS,MEXTPG>
capabilities=4/53bb<RXCSUM, TXCSUM, VLAN_MTU, VLAN_HUTAGGING, JUMBO_MTU, VLAN_ HUCSUM, TS04, TSO6,LRO, WOLLUCAST ,WOL_MCAST, WOL_ MAGIC, VLAN HUFILTER, VLAN_HUTSO, NETMAP, RCSUM_IPV6, TXCSUM IPV6, HUSTATS, MEXTPG>
ether 00:08:a2:12:87:27
inet 192.168.208.200 netmask 0xffffff00 broadcast 192.168.208.255
inet fe80::9e69:b4ff:fe63;6cca&ix3 prefixlen 64 scopeid Oxe
media: Ethernet autoselect (10Cbase-Twinax <full-duplex,rxpause, txpause>)
status: active supported media;
media autoselect media 10Gbase-Twinax
nd6 options=21<PERFORMNUD, AUTO_LINKLOCAL>
drivername: ix3
plugged: SFP/SFP+/SFP28 Unknown (Copper pigtail)
vendor: DEM PN: SFP-H10GB-CU1M SN: CSC200801600244 DATE: 2020-08-14
[24.03-RELEASE1Lroot&pfSense.home,arpa/root:
124,03-RELEASE] [root.@pfSense.home,arpal/root: -
@Sammy2Netgo results with sfp unplugged -
(24,03-RELEASE][root&pfSense,home,arpa]/root:
(24,03-RELEASE1[root&pfSense.home.arpal/root: ifconfig -vm 1x3
ix3: flags=1008843<UP ,BROADCAST, RUNNING,SIMPLEX, MULTICAST, LOWER UP> metric 0 mtu 1500
options=4138bb<RXCSUM, TXCSUM, VLAN_ MTU, VLAM_ HUTAGGING, JUMBO_MTU, VLAN HUCSUM, WOLUCAST, WOL.MCAST,MOLMACIC, VLAN_HUFILTER, RCSUM_1PV6, TICSUM_ IPV6, HUSTATS, MEXTPG>
capabilities=4f53/bb<RXCSUM,TXCSUM, VLAN_MTU, VLAN_HUTAGING, JUMBO_MTU, VLAN_HUCSUM, TSO4, TSOG,LRO,WOLUCAST, WOL_MCAST, MOL_ MAGIC, VLAN_HUFILTER, VLAN_HWTSO,NETMAP, RICSUM_IPV6, TXCSUM_IPV,HUSTATS, MEXTPG>
ether 00:08:a2:12:87:27
inet 192,168.208.200 netmask 0xffffff00 broadcast 192.168.208.255
inet fe80::9e69;b4ff:fe63:6cca%ix3 prefixlen 64 scopeid Oxe
media: Ethernet autoselect
status: no carrier supported media:
media autoselect media 10Gbase-Twinax
nd6 options=21<PERFORMNUD, AUTO_LINKLOCAL>
drivername: ix3 -
@Sammy2Netgo
Here is my current assignments setup:
Wan>ix0 ovtained ip
Lan>ix3 dhcp Ip & gateway set
Opt1>lagg0.4090
Opt2>lagg0.4091
Im so confused whats causing this issue i should be connecting through switch but am not is it something wrong with netgate dhcp server not working properly or blocking it ? Nit sure why netmask showing as 0xffffff00
How do i switch from root back to console or end root to go back ? -
@Sammy2Netgo my device now thats plugged into external switch niw getting dhcp lease from isp modem/router instead netgate router this is messed up
-
The LAN interface should not have a gateway configured on it directly.
The only reason you would ever have a gateway on LAN would be if you had a downstream router connected to it. That could be a layer3 switch but you would then need to have static routes setup to other downstream subnets. You are not using anything like that as I understand it so you should remove the gateway.
The NIC results are as expected so you have the correct NIC configured.
Physically how are these things connected?
There must be some layer 2 connection to the ISP router if clients are pulling a lease from there. So a misconfigured vlan on the switch perhaps?
-
@stephenw10 i did factory reset and will be configuring negate through isp wan external ip .
I have fiber sfp xgpon hooked to isp router/modem and from there hooked to netgate wan ixo and ix3 hooked sfp+ to external switch -
@Sammy2Netgo do i need to setup vlans during first initial interface config ?
-
@Sammy2Netgo do i need opt 1 & opt 2 set in interface assignments ?
I started with
Wan ix0
Lan ix3
I left out opt 1 opt2 -
This post is deleted! -
@stephenw10 but my dhcp on lan will need to have gateway set on dhcp lan to be able to connect to router gui from switch ??
This is how i set lan ix3 settings :
Enter lan ipv4 -192.168.xxx.xxx
Subnet mask -24
For wan enter lan ipv4 upstream gateway adress :
Enter for none
Enable dchp server on lan -yes
Start ip range -192.168.1.0
End ip range -192.168.1.255 -
No you shouldn't need to setup any VLANs to get initial connectivity. You are not using the on-board switch. JUst WAN and LAN configured like that should be fine.
-
@Sammy2Netgo said in Netgate 7100-1U New NIC setup issues:
but my dhcp on lan will need to have gateway set on dhcp lan to be able to connect to router gui from switch ??
Yes, but that's not what a gateway on the interface itself is for. That defines what pfSense itself uses as a gateway. The DHCP server will pass the interface address to clients to use as a gateway.
-
@stephenw10 this new card is causing nothing but problems in the configs
So what do i need to do to get connectivity ? When i factory reset even the port 1 which should be wan lagg0.4090 wont work to obtain ip
Can you let me know setup procedure from beginning factory reset and console port assignments or anything that needs to be done to regain connectivity/Thanx
Factory resetting the netgate with new card how would i gain access to web gui ?Which port as wan and lan by default with new card installed
Factory reset default assignments -
Wan>lagg0.4090
Lan>lagg0.4091
Opt1>ix0
Opt2>ix1 -
OK so you need this extra NIC to get 10Gbase-T connections? Some Nbase rate?
Let me create a default config you can use....