Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login
    Introducing Netgate Nexus: Multi-Instance Management at Your Fingertips.

    Dynamic DNS issue with failover interface - when primary interface is up again IP is not updated (2.9.0)

    Scheduled Pinned Locked Moved DHCP and DNS
    1 Posts 1 Posters 80 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • L Offline
      LDS
      last edited by LDS

      I have a setup with two WAN interfaces, in a failover gateway group:

      • Primary: DSL line, Drayte Vigor 165 in bridge mode, PPPoE, dynamic public IP, Tier 1
      • Secondary: mobile 4G line, TCL IK41VE on USB port, CG-NAT IP, Tier 2, This USB key acts as a router, and assigns an IP to the pfSense interface via DHCP. Its availibility is checked with an external IP.

      I also set "Kill all states for lower priority gateways" in Advanced - Gateway Recovery.

      Dynamic DNS is set HE.Net, and Check IP mode to default.

      If the VDSL line goes down (recently the far end ONU closed the VDLS connection a few times), the Dynamic DNS service updates the IP to the mobile connection IP, but when the PPPoE interfaces becomes available again in a minute or two, the IP is never updated to the new PPPoE IP, I'm forced to update it manually.

      This is the last message (from email) of DNS update:

      12:35:51 DynDNS updated IP Address for home.xxxxx.cloud on USBKEY (ue0) to 151.xxx.xxx.xxx

      In the notification message I received by mail, I've noticed something strange, there were two messages, in this order:

      12:36:45 WAN2_PPPOE is available now, adding to routing group FAILOVER_GROUP; 9.9.9.9|195.xxx.xxx.xxx|WAN2_PPPOE|8.344ms|0.51ms|0.0%|online|none

12:36:46 WAN2_PPPOE has packet loss, omitting from routing group FAILOVER_GROUP; 9.9.9.9|80.xxx.xxx.xxx|WAN2_PPPOE|0ms|0ms|100%|down|highloss

      The first messages is the PPPoE coming back online with the new IP - the second is about detecting loss but still with the previously assigned IP - why? That IP is no longer valid, didn't pfSense forget it?

      No DNS update made.

      A few seconds later, another message with the newly assigned IP (IP same as above, redacted for privacy)

      12:36:52 WAN2_PPPOE is available now, adding to routing group FAILOVER_GROUP; 9.9.9.9|195.xxx.xxx.xxx|WAN2_PPPOE|8.099ms|0.508ms|10%|online|none

      Again, after the tier 1 interface is back online, no DNS update is attempted, manual intervention is required.

      I saw this happening both with the WAN interface or the failover group assigned to the Dynamic DNS service entry.

      Maybe the issue is related to the IP changing twice in a few minutes?

      Relevant log:

      Sep 15 12:37:11 	php-fpm 	37962 	ERROR [phpDynDNS] (home.sandon.cloud) Could not determine the request IP address (using "FAILOVER_GROUP", "pppoe0"): gateway not online
Sep 15 12:37:11 	php-fpm 	37962 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:37:11 	php-fpm 	90047 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:37:08 	php-cgi 	87956 	"NOTICE [HAProxy] started new pid:92693\n"
Sep 15 12:37:08 	php-cgi 	87956 	"NOTICE [HAProxy] reload old pid:22837\n"
Sep 15 12:37:08 	php-fpm 	37962 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:37:07 	check_reload_status 	501 	Reloading filter
Sep 15 12:37:07 	check_reload_status 	501 	Starting packages
Sep 15 12:37:07 	php-fpm 	44725 	NOTICE pfSense package system has detected an IP change or dynamic WAN reconnection - 192.168.210.1 -> 192.168.210.1 - Restarting packages.
Sep 15 12:37:07 	devd 	1329 	notify_clients: send() failed; dropping unresponsive client
Sep 15 12:37:05 	php-fpm 	37962 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:37:05 	php-fpm 	44725 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:37:01 	php-fpm 	37962 	ERROR [phpDynDNS] (home.sandon.cloud) Could not determine the request IP address (using "FAILOVER_GROUP", "pppoe0"): gateway not online
Sep 15 12:37:01 	php-fpm 	37962 	ERROR [Gateway Monitoring] status socket dpinger: not found
Sep 15 12:37:00 	php-fpm 	44725 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:37:00 	php-fpm 	29545 	NOTICE [OpenVPN] One or more OpenVPN tunnel endpoints may have changed IP addresses. Reloading endpoints that may use WAN2_PPPOE.
Sep 15 12:36:59 	php-fpm 	37962 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:36:59 	php-fpm 	29545 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:36:57 	php-fpm 	83724 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:36:55 	check_reload_status 	501 	Restarting OpenVPN tunnels/interfaces
Sep 15 12:36:55 	check_reload_status 	501 	Restarting IPsec tunnels
Sep 15 12:36:55 	check_reload_status 	501 	updating dyndns WAN2_PPPOE
Sep 15 12:36:53 	php-fpm 	77778 	NOTICE Default gateway setting WAN_PPPOE Gateway as default.
Sep 15 12:36:53 	php-fpm 	77778 	NOTICE switch default gateway to: WAN2_PPPOE
Sep 15 12:36:52 	php-fpm 	77778 	NOTICE WAN2_PPPOE is available now, adding to routing group FAILOVER_GROUP; 9.9.9.9|195.xxx.xxx.xxx|WAN2_PPPOE|8.099ms|0.508ms|10%|online|none
Sep 15 12:36:52 	php-fpm 	77778 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:36:52 	php-cgi 	20741 	"NOTICE [HAProxy] started new pid:22837\n"
Sep 15 12:36:52 	php-cgi 	20741 	"NOTICE [HAProxy] reload old pid:72630\n"
Sep 15 12:36:50 	check_reload_status 	501 	Reloading filter
Sep 15 12:36:50 	check_reload_status 	501 	Starting packages
Sep 15 12:36:50 	php-fpm 	90047 	NOTICE pfSense package system has detected an IP change or dynamic WAN reconnection - 80.xxx.xxx.xxx -> 195.xxx.xxx.xxx - Restarting packages.
Sep 15 12:36:49 	kernel 		ovpns1: link state changed to UP
Sep 15 12:36:48 	devd 	1329 	notify_clients: send() failed; dropping unresponsive client
Sep 15 12:36:48 	check_reload_status 	501 	rc.newwanip starting ovpns1
Sep 15 12:36:48 	check_reload_status 	501 	Reloading filter
Sep 15 12:36:48 	check_reload_status 	501 	Reloading filter
Sep 15 12:36:48 	kernel 		ovpns1: link state changed to DOWN
Sep 15 12:36:46 	php-fpm 	90047 	NOTICE Default gateway setting USBKEY_DHCP Gateway as default.
Sep 15 12:36:46 	php-fpm 	90047 	NOTICE switch default gateway to: USBKEY_DHCP
Sep 15 12:36:46 	php-fpm 	90047 	NOTICE WAN2_PPPOE has packet loss, omitting from routing group FAILOVER_GROUP; 9.9.9.9|80.xxx.xxx.xxx70|WAN2_PPPOE|0ms|0ms|100%|down|highloss
Sep 15 12:36:46 	php-fpm 	90047 	NOTICE [Filter] IP Address has changed, killing states on former IP Address 80.xxx.xxx.xxx.
Sep 15 12:36:46 	php-fpm 	90047 	NOTICE Default gateway setting WAN_PPPOE Gateway as default.
Sep 15 12:36:45 	php-fpm 	90047 	NOTICE switch default gateway to: WAN2_PPPOE
Sep 15 12:36:45 	php-fpm 	90047 	NOTICE WAN2_PPPOE is available now, adding to routing group FAILOVER_GROUP; 9.9.9.9|195.xxx.xxx.xxx|WAN2_PPPOE|8.344ms|0.51ms|0.0%|online|none
Sep 15 12:36:45 	php-fpm 	90047 	ERROR [Gateway Monitoring] timeout while retrieving status for gateway USBKEY_DHCP
Sep 15 12:36:40 	php-fpm 	77778 	NOTICE rc.newwanipv6: No IPv6 address found for interface WAN [lan].
Sep 15 12:36:40 	php-fpm 	90047 	NOTICE rc.newwanipv6: No IPv6 address found for interface WAN [lan].
Sep 15 12:36:39 	rtsold 	18885 	NOTICE [DHCP Client] Received RA specifying route fe80::7a72:5dff:fe9a:5f72 for interface lan(pppoe0)
Sep 15 12:36:39 	check_reload_status 	501 	rc.newwanip starting pppoe0
Sep 15 12:36:38 	check_reload_status 	501 	rc.newwanipv6 starting pppoe0
Sep 15 12:36:32 	check_reload_status 	501 	Rewriting resolv.conf
Sep 15 12:36:31 	php-cgi 	96265 	NOTICE [Filter] rc.kill_states: Removing states for interface pppoe0
Sep 15 12:36:31 	php-cgi 	96265 	NOTICE [Filter] rc.kill_states: Removing states for IP fe80::3eec:efff:feea:9550%pppoe0/32
Sep 15 12:36:30 	check_reload_status 	501 	Rewriting resolv.conf
Sep 15 12:36:30 	php-cgi 	93934 	NOTICE [Filter] rc.kill_states: Removing states for interface pppoe0
Sep 15 12:36:29 	php-cgi 	93934 	NOTICE [Filter] rc.kill_states: Removing states for IP 80.xxx.xxx.xxx/32
Sep 15 12:35:50 	php-fpm 	44725 	NOTICE [OpenVPN] One or more OpenVPN tunnel endpoints may have changed IP addresses. Reloading endpoints that may use WAN2_PPPOE.
Sep 15 12:35:44 	php-fpm 	37962 	NOTICE Default gateway setting USBKEY_DHCP Gateway as default.
Sep 15 12:35:44 	php-fpm 	83724 	NOTICE Default gateway setting USBKEY_DHCP Gateway as default.
Sep 15 12:35:44 	php-fpm 	37962 	NOTICE switch default gateway to: USBKEY_DHCP
Sep 15 12:35:44 	php-fpm 	83724 	NOTICE switch default gateway to: USBKEY_DHCP
Sep 15 12:35:44 	php-fpm 	44725 	NOTICE WAN2_PPPOE has packet loss, omitting from routing group FAILOVER_GROUP; 9.9.9.9|80.xxx.xxx.xxx|WAN2_PPPOE|10.392ms|6.48ms|24%|down|highloss
Sep 15 12:35:43 	check_reload_status 	501 	Reloading filter
Sep 15 12:35:43 	check_reload_status 	501 	Restarting OpenVPN tunnels/interfaces
Sep 15 12:35:43 	check_reload_status 	501 	Restarting IPsec tunnels
Sep 15 12:35:43 	check_reload_status 	501 	updating dyndns WAN2_PPPOE
Sep 15 12:35:42 	php-fpm 	77778 	NOTICE [Gateway Monitoring] killed all states for gateways with interface ue0 due to gateway recovery for FAILOVER_GROUP
Sep 15 12:35:40 	php-fpm 	29545 	NOTICE [OpenVPN] One or more OpenVPN tunnel endpoints may have changed IP addresses. Reloading endpoints that may use WAN_DHCP6.
Sep 15 12:35:39 	check_reload_status 	501 	Reloading filter
Sep 15 12:35:39 	check_reload_status 	501 	Restarting OpenVPN tunnels/interfaces
Sep 15 12:35:39 	check_reload_status 	501 	Restarting IPsec tunnels
Sep 15 12:35:39 	check_reload_status 	501 	updating dyndns WAN_DHCP6

      It says "gateway not online" but it did got the IP from it - maybe it's still too early and the connection is not fully up? Dpinger socket has issues?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.
      Privacy Policy · Cookie Policy