PfSense PPPoE Issues

pantera

Hi all,

I am a bit of a noob with pfSense (being my first time installing it) and after much head scratching and so on, I have managed to get everything up and running, with one exception: getting my DSL line connected via PPPoE. I am running pfSense 2.2 32 bit

Setup:
DLink dsl-2750u (192.168.0.1) – > pfSense WAN --> pfSense LAN (192.168.0.2) --> switch --> Server 2012 R2 (192.168.0.3) DHCP, DNS, etc

Everything is plugged in and hooked up correctly, but I keep getting the following in the PPP logs:

Feb 14 11:24:34 ppp: [wan_link0] Link: DOWN event
Feb 14 11:24:34 ppp: [wan_link0] LCP: Down event
Feb 14 11:24:34 ppp: [wan_link0] Link: reconnection attempt 2805 in 2 seconds
Feb 14 11:24:36 ppp: [wan_link0] Link: reconnection attempt 2805
Feb 14 11:24:36 ppp: [wan_link0] PPPoE: Connecting to 'Afrihost'
Feb 14 11:24:45 ppp: [wan_link0] PPPoE connection timeout after 9 seconds
Feb 14 11:24:45 ppp: [wan_link0] Link: DOWN event
Feb 14 11:24:45 ppp: [wan_link0] LCP: Down event
Feb 14 11:24:45 ppp: [wan_link0] Link: reconnection attempt 2806 in 4 seconds
Feb 14 11:24:49 ppp: [wan_link0] Link: reconnection attempt 2806
Feb 14 11:24:49 ppp: [wan_link0] PPPoE: Connecting to 'Afrihost'
Feb 14 11:24:58 ppp: [wan_link0] PPPoE connection timeout after 9 seconds
Feb 14 11:24:58 ppp: [wan_link0] Link: DOWN event
Feb 14 11:24:58 ppp: [wan_link0] LCP: Down event
Feb 14 11:24:58 ppp: [wan_link0] Link: reconnection attempt 2807 in 2 seconds
Feb 14 11:25:00 ppp: [wan_link0] Link: reconnection attempt 2807
Feb 14 11:25:00 ppp: [wan_link0] PPPoE: Connecting to 'Afrihost'
Feb 14 11:25:09 ppp: [wan_link0] PPPoE connection timeout after 9 seconds
Feb 14 11:25:09 ppp: [wan_link0] Link: DOWN event
Feb 14 11:25:09 ppp: [wan_link0] LCP: Down event
Feb 14 11:25:09 ppp: [wan_link0] Link: reconnection attempt 2808 in 2 seconds
Feb 14 11:25:11 ppp: [wan_link0] Link: reconnection attempt 2808
Feb 14 11:25:11 ppp: [wan_link0] PPPoE: Connecting to 'Afrihost'
Feb 14 11:25:20 ppp: [wan_link0] PPPoE connection timeout after 9 seconds
Feb 14 11:25:20 ppp: [wan_link0] Link: DOWN event
Feb 14 11:25:20 ppp: [wan_link0] LCP: Down event
Feb 14 11:25:20 ppp: [wan_link0] Link: reconnection attempt 2809 in 2 seconds
Feb 14 11:25:22 ppp: [wan_link0] Link: reconnection attempt 2809
Feb 14 11:25:22 ppp: [wan_link0] PPPoE: Connecting to 'Afrihost'
Feb 14 11:25:31 ppp: [wan_link0] PPPoE connection timeout after 9 seconds
Feb 14 11:25:31 ppp: [wan_link0] Link: DOWN event
Feb 14 11:25:31 ppp: [wan_link0] LCP: Down event
Feb 14 11:25:31 ppp: [wan_link0] Link: reconnection attempt 2810 in 2 seconds
Feb 14 11:25:33 ppp: [wan_link0] Link: reconnection attempt 2810
Feb 14 11:25:33 ppp: [wan_link0] PPPoE: Connecting to 'Afrihost'

I have also made sure that the dsl-2750u is working in bridge mode, by plugging it directly into a laptop network port and successfully dialling out a PPPoE connection.

Please could any of you guru's try and advise me on what I could be doing wrong here…

PS. tried to attach screenshots

1.png_thumb

stephenw10

The LAN of the D-link (even in Bridge mode) and pfSense LAN are in the same subnet which can only cause problems. You should change the pfSense LAN subnet to something else, the default 192.168.1.1/24 would be fine here, why did you change it?

Your PPP log shows absolutely no connection happening so I would suggest that your D-Link box is not bridging the connection correctly.

Steve

Gertjan

@pantera:

Setup:
DLink dsl-2750u (192.168.0.1) – > pfSense WAN --> pfSense LAN (192.168.0.2) --> switch --> Server 2012 R2 (192.168.0.3) DHCP, DNS, etc

Everything is plugged in and hooked up correctly, .....

There is a huge conflict between these two phrases.
Please confirm: your modem (DLink dsl-2750u - bridged mode = pppoe activated) is hooked up to a WAN NIC - and only that device.
To YOUR LAN NIC (keep the default IP 192.168.1.1) you hook up your switch …. and to the switch all other network devices.
So: NO (at least 2 NIC's) means NO pfSense**.
A firewall/router device, as is pfSEnse, has always AT LEAST 2 NIC's.
Note: A second NIC is less expensive as a packet of cigarettes

I'm using pfSEnse for years now, using a 'dumb' Thomson ADSL modem who operates in pppoe mode.
This means that I the WAN NIC (shows for me: PPPOE0(rl0) - fti/xxxxxx) obtains the WAN IP:

Using username "admin".
Authenticating with public key "rsa-key-20150201"
Passphrase for key "rsa-key-20150201":
*** Welcome to pfSense 2.2-RELEASE-pfSense (amd64) on pfsense ***

 WAN (wan)       -> pppoe0     -> v4/PPPoE: 109.214.64.206/32
 LAN (lan)       -> fxp0       -> v4: 192.168.1.1/24
                                  v6: 2001:471:1f13:5c4:2::1/64
 PORTAL (opt1)   -> sis0       -> v4: 192.168.2.1/24
 HENETV6 (opt2)  -> gif0       -> v6: 2001:471:1f12:5c4::2/128
 MODEMACCES (opt3) -> rl0      -> v4: 10.0.0.2/24

**There are exceptions, but consider them 'hard core configuration'.

pantera

@stephenw10:

The LAN of the D-link (even in Bridge mode) and pfSense LAN are in the same subnet which can only cause problems. You should change the pfSense LAN subnet to something else, the default 192.168.1.1/24 would be fine here, why did you change it?

Your PPP log shows absolutely no connection happening so I would suggest that your D-Link box is not bridging the connection correctly.

Steve

Hi, thanks for the suggestion. I will test this and see if it works. I tested the DLink was working in bridge mode by plugging it directly in to a windows PC, and I was able to dial out with no issues.

The machine that I am running pfSense on is an old P4 box. I am using the onboard VIA chipset 100mbps for the WAN connection. This cable runs directly from the DSL-2750u to the port on the back of the motherboard.

To get this working, I also purchased a Intel 1gbps PCI NIC which is used for the LAN connection. THe cable from pfSense runs straight in to the switch, to which all other devices are connected.

pantera

@Gertjan:

@pantera:

Setup:
DLink dsl-2750u (192.168.0.1) – > pfSense WAN --> pfSense LAN (192.168.0.2) --> switch --> Server 2012 R2 (192.168.0.3) DHCP, DNS, etc

Everything is plugged in and hooked up correctly, .....

There is a huge conflict between these two phrases.
Please confirm: your modem (DLink dsl-2750u - bridged mode = pppoe activated) is hooked up to a WAN NIC - and only that device.
To YOUR LAN NIC (keep the default IP 192.168.1.1) you hook up your switch …. and to the switch all other network devices.
So: NO (at least 2 NIC's) means NO pfSense**.
A firewall/router device, as is pfSEnse, has always AT LEAST 2 NIC's.
Note: A second NIC is less expensive as a packet of cigarettes

I'm using pfSEnse for years now, using a 'dumb' Thomson ADSL modem who operates in pppoe mode.
This means that I the WAN NIC (shows for me: PPPOE0(rl0) - fti/xxxxxx) obtains the WAN IP:
Using username "admin".
Authenticating with public key "rsa-key-20150201"
Passphrase for key "rsa-key-20150201":
*** Welcome to pfSense 2.2-RELEASE-pfSense (amd64) on pfsense ***

 WAN (wan)       -> pppoe0     -> v4/PPPoE: 109.214.64.206/32
 LAN (lan)       -> fxp0       -> v4: 192.168.1.1/24
                                  v6: 2001:471:1f13:5c4:2::1/64
 PORTAL (opt1)   -> sis0       -> v4: 192.168.2.1/24
 HENETV6 (opt2)  -> gif0       -> v6: 2001:471:1f12:5c4::2/128
 MODEMACCES (opt3) -> rl0      -> v4: 10.0.0.2/24
**There are exceptions, but consider them 'hard core configuration'.

This is the exact config that I am running. I have on onboard port for the WAN (100mbps)

I also bought and installed a Intel 1gbps PCI NIC in the computer, and this is connected to the switch.

Gertjan

Perfect :)

Can you screenshot your WAN interface ?
Or, Diagnostics > Backup/Restore -> and show these resulting XML parts here:
<interfaces><ppps>(mask out passwords)</ppps></interfaces>

stephenw10

Testing the pppoe connection from windows is a good test. Makes me wonder if you are seeing a physical linkup between the pfSense WAN interface and the modem. You see link leds? The system logs show the link up?

Steve

pantera

@Gertjan:

Perfect :)

Can you screenshot your WAN interface ?
Or, Diagnostics > Backup/Restore -> and show these resulting XML parts here:
<interfaces><ppps>(mask out passwords)</ppps></interfaces>

I will do so as soon as I get in front of the PC. thank you for the help and direction. great to know that there is a community of people willing to assist when things go a bit pear shaped.