Multicast Issue after upgrade
-
Hello,
I update our pfsense system from 2.1.5 to 2.2.0.
Everything is fine except one issue.
We have one loadbalancer with multicast IP address wich is not accessible any more.
If I switch loadbalancer to unicast the IP address is accessible again.Do you have any idea how I can fix this problem?
Regards,
Ivo -
why would you think pfsense has anything to do with multicast?? Are you running the igmp proxy or something?
Multicast would be limited to 1 segment.. The gateway off said segment (pfsense) would not have anything to do with devices talking to each other via multicast.
Happy to help you figure out your issue, but I find it unlikely pfsense has anything to do with it. Do you have interfaces bridged? A sketch of your network showing how the device wants to talk to this load balancer via multicast is connected, how the LB is connected and where pfsense is in the connection..
-
Hi johnopz,
There is no igmp proxy configured.
The configuration is attached.
I am confused as well when I saw that is not working after the upgrade.
If I replace the PFSense with my laptop I'm able to ping LB in multicast mode.Let me know if you need more information about this.
Regards,
Ivo
-
Please describe exactly how you are testing this, command used and from where etc.
I suspect this is due to the underlying changes in CARP going to 2.2 but I'm uncertain how it applies here.
https://doc.pfsense.org/index.php/UpgradeGuide#CARP_ChangesEdit: I see precisely zero reports relating to this so maybe not.
Edit2: It's not. ::)
Steve
-
You'll need to add a tunable under System>Advanced, Tunables for net.link.ether.inet.allow_multicast and set it to 1. Technically prior versions were the ones broken there, as per RFC 1812, "A router MUST not believe any ARP reply that claims that the Link Layer address of another host or router is a broadcast or multicast address."
related bug report, though it's not a bug.
https://redmine.pfsense.org/issues/4284 -
Thank you guys, I think this will solve my issue.
Will test it on first suitable time for us and will let you know.Best regards,
Ivo -
Hello,
It looks like the suggested fix by cmb works. ;)
Thanks again.Best regards,
Ivo
