Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    strange, can access device if dhcp allocated, but not when reserved

    Scheduled Pinned Locked Moved General pfSense Questions
    38 Posts 6 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • georgelzaG
      georgelza
      last edited by

      Hi all.

      Strange one.

      My network,
      172.16.10.0/24 -> All physical servers, core lan
      172.16.20.0/24 -> all wifi, (unifi AP's) - SSID tinman - vlan20
      172.16.100.0/24 -> all wifi, (unifi AP's) - SSID tinmaniot - vlan100

      now for both... I have 172.16.x.2-200 as dhcp reserved. and then 201-254 DHCP assigned.
      When I connect a raspberry pi and tell it to connect to either SSID it seems and self get a DHCP ip then I can ping it, I can ssh to it.
      However if I DHCP assign/reserve a IP based on MAC.. I can't access it.
      It can however access other devices...

      Ideas ?
      both these clan's have a access any IP / network rule as first rule..

      G

      georgelzaG 1 Reply Last reply Reply Quote 0
      • georgelzaG
        georgelza @georgelza
        last edited by

        It seems, even further... even when on DHCP.... I can ssh to the devices... I
        would be connected... and the I'd drop off...

        This is new... I have other devices that are stable on network.

        These are 1 brand new Raspberry Pi Zero 2 W and 1 older (same model) and a Pi 3B. so it's on 3 units now...

        G

        1 Reply Last reply Reply Quote 0
        • patient0P
          patient0
          last edited by

          What pfSense version are you using and what DHCP server (ISC DHCP or KEA)?

          georgelzaG 1 Reply Last reply Reply Quote 0
          • stephenw10S
            stephenw10 Netgate Administrator
            last edited by

            Where are you trying to access it from?

            What do the firewall states look like when you try?

            Are you policy routing the traffic out of the WAN for example?

            georgelzaG 1 Reply Last reply Reply Quote 0
            • georgelzaG
              georgelza @patient0
              last edited by

              @patient0 said in strange, can access device if dhcp allocated, but not when reserved:

              What pfSense version are you using and what DHCP server (ISC DHCP or KEA)?

              2.7.2-RELEASE (amd64)

              as for DHCP it's services/dhcp server...

              G

              johnpozJ patient0P 2 Replies Last reply Reply Quote 0
              • georgelzaG
                georgelza @stephenw10
                last edited by

                @stephenw10 said in strange, can access device if dhcp allocated, but not when reserved:

                Where are you trying to access it from?

                What do the firewall states look like when you try?

                Are you policy routing the traffic out of the WAN for example?

                I'm on the same vlan20 that was giving all issues...

                going to try and move it to my IoT vlan100 and see if some how it stabalizes...

                As said in another thread, when I DHCP receive address for the Mac I could not even access it, where as if I had DHCP assign it then I could access it until it drops...

                something strange going on here...

                G

                stephenw10S 1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator @georgelza
                  last edited by

                  @georgelza said in strange, can access device if dhcp allocated, but not when reserved:

                  for DHCP it's services/dhcp server..

                  He meant which one ISC or KEA

                  Be it a device gets an IP via dhcp or via a reservation in dhcp or statically set on the device doesn't matter. Unless its getting/has the wrong IP for the network its on, or its not getting an IP at all.. Many devices will set their IP to say 169.254.x.x if set for dhcp but didn't get an IP from the dhcp server.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • patient0P
                    patient0 @georgelza
                    last edited by

                    @georgelza System > Advanced > Networking:

                    Server Backend: Kea DHCP or ISC DHCP (Deprecated)?

                    georgelzaG 1 Reply Last reply Reply Quote 0
                    • georgelzaG
                      georgelza @patient0
                      last edited by

                      @patient0 ok, sorry, gap in knowledge...

                      when I do a dhcp reserve then i cant even get onto device.
                      when i dhcp reserve then i get onto device but it drops off network eventually, it most times come back... but it's unstable...

                      if you tell me what to go look where I can.

                      G

                      johnpozJ 1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @georgelza
                        last edited by

                        @georgelza again what dhcp are you running isc or kea? You should see it in the dhcp server settings

                        dhcp.jpg

                        Kea is still preview - and can have issues still

                        Does your client get a valid IP or not.. With valid settings, gateway, etc. Does really matter how your device gets the ip be it from a pool or reservation in the dhcp server or you set it locally on the device.

                        As to unstable? If your lease is short and renew isn't working - the device could be dropping the lease and doing a discover, etc. and for a time then it wouldn't have an IP.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        georgelzaG 1 Reply Last reply Reply Quote 0
                        • georgelzaG
                          georgelza @johnpoz
                          last edited by

                          @johnpoz Looks like it's using KEA.

                          Yes it's getting a IP. and initially i can access it, if dhcp assigned.

                          how would i switch the dhcp to older/stable version.

                          G

                          johnpozJ 1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator @georgelza
                            last edited by

                            @georgelza in networking advanced

                            dhcpset.jpg

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            georgelzaG 1 Reply Last reply Reply Quote 1
                            • georgelzaG
                              georgelza @johnpoz
                              last edited by

                              @johnpoz switched...

                              lets see if this stabilises things...

                              thanks.

                              G

                              1 Reply Last reply Reply Quote 0
                              • stephenw10S
                                stephenw10 Netgate Administrator @georgelza
                                last edited by

                                @georgelza said in strange, can access device if dhcp allocated, but not when reserved:

                                I'm on the same vlan20 that was giving all issues...

                                If you're connecting from the same VLAN it can't be pfSense blocking it. It could only be the host failing to pull a DHCP lease entirely. But that should be easy to check.

                                georgelzaG 1 Reply Last reply Reply Quote 0
                                • georgelzaG
                                  georgelza @stephenw10
                                  last edited by

                                  @stephenw10 but it's getting a ip, if i go onto the device via screen/keyboard it would be doing a apt get update/upgrade...

                                  G

                                  1 Reply Last reply Reply Quote 0
                                  • stephenw10S
                                    stephenw10 Netgate Administrator
                                    last edited by

                                    Then it sounds like some local issue. Maybe a mismatched subnet. Or a local firewall on the host you're trying to connect to. Or both!

                                    1 Reply Last reply Reply Quote 0
                                    • georgelzaG
                                      georgelza
                                      last edited by

                                      not sure why can't get to the device if I dhcp reserve a ip... vs self dhcp assign...

                                      but got the connectivity stable.

                                      noticed that the 2 devices i was working on kept on connecting/disconnecting...

                                      ended chancing channel in the AP they were connecting to... think between me and people around me the channel was flooded to point of causing flapping.

                                      G

                                      johnpozJ georgelzaG 2 Replies Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator @georgelza
                                        last edited by

                                        @georgelza Just again going to state this so people reading this thread don't think this is a thing.

                                        It does not matter if your device gets the IP from the pool or a reservation - its still an IP on the same network..

                                        So unless you put in your reservation something like a wrong gateway or wrong dns.. Devices on the same network can talk to each other and has zero to do with pfsense.

                                        If your interface is say 192.168.10.0/24 and your pool is 192.168.10.100-200 and some reservation you set for some device is 192.168.10.50 - they are still on the 192.168.10.0/24 network.. And can talk to each other, etc. etc.

                                        Not sure what issue your having but be it a device gets an IP from the pool, a reservation or you set it static on the device... If the IP is on the same network how they got the ip makes no difference.

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        1 Reply Last reply Reply Quote 0
                                        • georgelzaG
                                          georgelza @georgelza
                                          last edited by

                                          Hi there

                                          I realise/know what you saying... same vlan must be able to talk to each other... not arguing... but what i am def having is when I do a dhcp reservation for the MAC address inside my reservation block then I can't access the device, if I allow it to get a IP itself from the DHCP service then I can...

                                          I did say to start with this is strange...

                                          For now it's working, will fault find this later.

                                          G

                                          johnpozJ 1 Reply Last reply Reply Quote 0
                                          • johnpozJ
                                            johnpoz LAYER 8 Global Moderator @georgelza
                                            last edited by

                                            @georgelza are you using kea - and reservations are not working? And your devices gets nothing so ends up with an IP of 169.254?

                                            Just look in your log is an IP given out.. Look on your device what is the IP, what is the mask - if devices are on the same network - how the device got the IP means nothing.

                                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                                            If you get confused: Listen to the Music Play
                                            Please don't Chat/PM me for help, unless mod related
                                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                                            georgelzaG 1 Reply Last reply Reply Quote 0
                                            • First post
                                              Last post
                                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.