Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Multi WAN on DHCP Fails

    Scheduled Pinned Locked Moved Routing and Multi WAN
    15 Posts 7 Posters 6.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bgbearcatfan
      last edited by

      Hoping someone can help me out.  I am currently using pfsense with two WAN interfaces over DHCP.  The problem i have is when i try to force traffic over the second WAN interface (using firewall rule to force over WAN2), it fails, and i get the following error message in system logs:

      kernel: arpresolve: can't allocate llinfo for xxx.xxx.xxx.xxx

      This error repeats about every few seconds.  All traffic fails going outside of the firewall although i can still communicate through internal lan.  I am not using any kind of traffic shaping or load balancing.  The end goal is to have a second WAN interface that can be used for a second web server using https traffic amongst a few other ports already in use on the first WAN interface.

      If i force all traffic to the first WAN (using firewall rule to force over WAN1) all works as expected.

      Thanks in advance for any help you can provide me with.

      /Brian
      /2.0.1-RELEASE
      built on Mon Dec 12 18:24:17 EST 2011

      1 Reply Last reply Reply Quote 0
      • B
        bgbearcatfan
        last edited by

        An update…

        I put in matching Gig intel network cards (same model and everything) and i still have the same problem.  When i'm running just one wan interface everything is great, but all hell breaks lose when i enable the second wan.

        /Brian
        /2.0.1-RELEASE
        built on Mon Dec 12 18:24:17 EST 2011

        1 Reply Last reply Reply Quote 0
        • S
          stax
          last edited by

          Are both interfaces totally separated?  no linking between them?

          1 Reply Last reply Reply Quote 0
          • B
            bgbearcatfan
            last edited by

            It goes like this:

            Wan1
                                                            –->   
            ISP Modem        --->    Hub-----|            ---->    pfSense
                                                            --->   
                                                          Wan2

            /Brian
            /2.0.1-RELEASE
            built on Mon Dec 12 18:24:17 EST 2011

            1 Reply Last reply Reply Quote 0
            • C
              cmb
              last edited by

              That log message is what you get when the system tries to ARP something that isn't on a locally connected network (may be possible in other circumstances but that's the only time I've seen it). What's the IP, subnet, gateway like on that interface? Is the gateway and subnet different on each WAN?

              1 Reply Last reply Reply Quote 0
              • B
                bgbearcatfan
                last edited by

                The gateway and subnet are the same on both wan interfaces.

                Subnet:    255.255.240.0
                Gateway:  72.49.176.1
                IP's for both WAN's:  72.49.190.xxx and 72.49.185.xxx

                /Brian
                /2.0.1-RELEASE
                built on Mon Dec 12 18:24:17 EST 2011

                1 Reply Last reply Reply Quote 0
                • H
                  heper
                  last edited by

                  pfsense does not support same gateway for multiple wan interfaces …
                  only way,i know, to get it to work is by putting a cheap linksys/dlink/whatever router in between 1 of the interface

                  1 Reply Last reply Reply Quote 0
                  • C
                    cmb
                    last edited by

                    yeah that's why, that must be another circumstance that can trigger that. The system has an ARP entry for that gateway IP on another NIC, and you're trying to force it to ARP that on a different NIC, and one particular IP can only have one ARP entry. An intermediate box doing NAT on one of the WANs is the way to work around that.

                    1 Reply Last reply Reply Quote 0
                    • jimpJ
                      jimp Rebel Alliance Developer Netgate
                      last edited by

                      I have seen that before when my cable modem lost sync and some states were still around from the 192.168.x.x IP for whatever reason. Since pf still had states referring to that gateway, the ARP errors continued.

                      Try resetting the states table (or perhaps run pfctl -g x.x.x.x  where x.x.x.x is the IP you're seeing the arp messages for) and see if they clear up.

                      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                      Need help fast? Netgate Global Support!

                      Do not Chat/PM for help!

                      1 Reply Last reply Reply Quote 0
                      • B
                        bgbearcatfan
                        last edited by

                        I'm pretty sure i tried that already, but i'll give it another shot.  Sounds like i might just be sol

                        /Brian
                        /2.0.1-RELEASE
                        built on Mon Dec 12 18:24:17 EST 2011

                        1 Reply Last reply Reply Quote 0
                        • jimpJ
                          jimp Rebel Alliance Developer Netgate
                          last edited by

                          OK. (Actually it's pfctl -b, not -g, apparently had a brain misfile on my last reply)

                          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                          Need help fast? Netgate Global Support!

                          Do not Chat/PM for help!

                          1 Reply Last reply Reply Quote 0
                          • W
                            webdawg
                            last edited by

                            @heper:

                            pfsense does not support same gateway for multiple wan interfaces …
                            only way,i know, to get it to work is by putting a cheap linksys/dlink/whatever router in between 1 of the interface

                            I thought it did now.

                            1 Reply Last reply Reply Quote 0
                            • jimpJ
                              jimp Rebel Alliance Developer Netgate
                              last edited by

                              @webdawg:

                              @heper:

                              pfsense does not support same gateway for multiple wan interfaces …
                              only way,i know, to get it to work is by putting a cheap linksys/dlink/whatever router in between 1 of the interface

                              I thought it did now.

                              Only for PPPoE, not DHCP/Static/anything else.

                              Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

                              Need help fast? Netgate Global Support!

                              Do not Chat/PM for help!

                              1 Reply Last reply Reply Quote 0
                              • W
                                webdawg
                                last edited by

                                @jimp:

                                @webdawg:

                                @heper:

                                pfsense does not support same gateway for multiple wan interfaces …
                                only way,i know, to get it to work is by putting a cheap linksys/dlink/whatever router in between 1 of the interface

                                I thought it did now.

                                Only for PPPoE, not DHCP/Static/anything else.

                                Ahh…No wonder my Multiwan PPPoE is working.

                                1 Reply Last reply Reply Quote 0
                                • D
                                  dwaynee77
                                  last edited by

                                  I don't call that multi WAN dude, one WAN, seperated using switch??

                                  1 Reply Last reply Reply Quote 0
                                  • First post
                                    Last post
                                  Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.