Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Routes seems to be dropped on dhcp rebind

    Scheduled Pinned Locked Moved General pfSense Questions
    1 Posts 1 Posters 634 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      Starch
      last edited by

      Hello,

      I use pfsense 2.2.1 amd64.

      Let's detail a bit my conf :

      • a WAN interface associated to WANGW gateway, marked as default gateway

      • a WAN_FREE interface associated to WAN_FREE_DHCP gateway.

      • my LAN interface.

      Although there is two WAN here, I do not use a multi wan setup for now, WAN_FREE is just used only for establishing some ipsec vpns, all other external traffic is supposed to go through WAN.

      My problem is that whenever WAN_FREE goes up and down, as it comes about every week, the default route of the firewall disappears. the WANGW gateway is still marked as up, but displaying routes show no "default" route.

      I attempted the use of the option "Disable Gateway Monitoring" on WANGW, but the problem still occurs.

      Does someone have an idea how to prevent that ?

      See below the logs during the incident.

      
Apr 9 03:48:54 	check_reload_status: Linkup starting igb3
Apr 9 03:48:54 	kernel: igb3: link state changed to DOWN
Apr 9 03:48:55 	php-fpm: /rc.linkup: DEVD Ethernet detached event for opt2
Apr 9 03:48:55 	php-fpm: /rc.linkup: DEVD Ethernet detached event for opt2
Apr 9 03:48:55 	check_reload_status: Linkup starting igb3
Apr 9 03:48:55 	kernel: igb3: link state changed to UP
Apr 9 03:48:56 	php-fpm[74992]: /rc.linkup: DEVD Ethernet attached event for opt2
Apr 9 03:48:56 	php-fpm[74992]: /rc.linkup: HOTPLUG: Configuring interface opt2
Apr 9 03:49:13 	check_reload_status: updating dyndns WAN_FREE_DHCP
Apr 9 03:49:13 	check_reload_status: Restarting ipsec tunnels
Apr 9 03:49:13 	check_reload_status: Restarting OpenVPN tunnels/interfaces
Apr 9 03:49:13 	check_reload_status: Reloading filter
Apr 9 03:49:14 	php-fpm[394]: /rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Reloading endpoints that may use WAN_FREE_DHCP.
Apr 9 03:49:14 	php-fpm[394]: /rc.filter_configure_sync: Could not find IPv4 gateway for interface (opt2).
Apr 9 03:49:29 	php-fpm[77557]: /rc.newipsecdns: IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
Apr 9 03:49:29 	php-fpm[77557]: /rc.newipsecdns: IPsec ERROR: Could not find phase 1 source for connection XXX. Omitting from configuration file.
Apr 9 03:50:03 	kernel: igb3: link state changed to DOWN
Apr 9 03:50:03 	check_reload_status: Linkup starting igb3
Apr 9 03:50:05 	kernel: igb3: link state changed to UP
Apr 9 03:50:05 	check_reload_status: Linkup starting igb3
Apr 9 03:50:05 	check_reload_status: rc.newwanip starting igb3
Apr 9 03:50:05 	check_reload_status: Restarting ipsec tunnels
Apr 9 03:50:05 	check_reload_status: updating dyndns opt2
Apr 9 03:50:05 	php-fpm[394]: /rc.linkup: DEVD Ethernet detached event for opt2
Apr 9 03:50:06 	php-fpm[24159]: /rc.linkup: DEVD Ethernet attached event for opt2
Apr 9 03:50:06 	php-fpm[24159]: /rc.linkup: HOTPLUG: Configuring interface opt2
Apr 9 03:50:06 	php-fpm[394]: /rc.newwanip: rc.newwanip: Info: starting on igb3.
Apr 9 03:50:06 	php-fpm[394]: /rc.newwanip: rc.newwanip: on (IP address: ) (interface: WAN_FREE[opt2]) (real interface: igb3).
Apr 9 03:50:06 	php-fpm[394]: /rc.newwanip: rc.newwanip: Failed to update opt2 IP, restarting...
Apr 9 03:50:06 	check_reload_status: Configuring interface opt2
Apr 9 03:50:06 	check_reload_status: rc.newwanip starting igb3
Apr 9 03:50:06 	check_reload_status: Restarting ipsec tunnels
Apr 9 03:50:06 	check_reload_status: updating dyndns opt2
Apr 9 03:50:08 	php-fpm[36537]: /rc.newwanip: rc.newwanip: Info: starting on igb3.
Apr 9 03:50:08 	php-fpm[36537]: /rc.newwanip: rc.newwanip: on (IP address: ) (interface: WAN_FREE[opt2]) (real interface: igb3).
Apr 9 03:50:08 	php-fpm[36537]: /rc.newwanip: rc.newwanip: Failed to update opt2 IP, restarting...
Apr 9 03:50:08 	check_reload_status: Configuring interface opt2
Apr 9 03:50:08 	check_reload_status: rc.newwanip starting igb3
Apr 9 03:50:10 	php-fpm[44501]: /rc.newwanip: rc.newwanip: Info: starting on igb3.
Apr 9 03:50:10 	php-fpm[44501]: /rc.newwanip: rc.newwanip: on (IP address: ) (interface: WAN_FREE[opt2]) (real interface: igb3).
Apr 9 03:50:10 	php-fpm[44501]: /rc.newwanip: rc.newwanip: Failed to update opt2 IP, restarting...
Apr 9 03:50:10 	check_reload_status: Configuring interface opt2
Apr 9 03:50:10 	check_reload_status: rc.newwanip starting igb3
Apr 9 03:50:11 	php-fpm[44501]: /rc.newwanip: rc.newwanip: Info: starting on igb3.
Apr 9 03:50:11 	php-fpm[44501]: /rc.newwanip: rc.newwanip: on (IP address: 0.0.0.0) (interface: WAN_FREE[opt2]) (real interface: igb3).
Apr 9 03:50:11 	php-fpm[44501]: /rc.newwanip: rc.newwanip: Failed to update opt2 IP, restarting...
Apr 9 03:50:11 	check_reload_status: Configuring interface opt2
Apr 9 03:50:13 	check_reload_status: rc.newwanip starting igb3
Apr 9 03:50:14 	php-fpm[48969]: /rc.newwanip: rc.newwanip: Info: starting on igb3.
Apr 9 03:50:14 	php-fpm[48969]: /rc.newwanip: rc.newwanip: on (IP address: xxx.xxx.xxx.xxx) (interface: WAN_FREE[opt2]) (real interface: igb3).
Apr 9 03:50:16 	php-fpm[48969]: /rc.newwanip: Forcefully reloading IPsec
Apr 9 03:50:16 	php-fpm[48969]: /rc.newwanip: Forcefully reloading IPsec
Apr 9 03:50:16 	check_reload_status: Reloading filter
Apr 9 03:50:16 	php-fpm[48969]: /rc.newwanip: Resyncing OpenVPN instances for interface WAN_FREE.
Apr 9 03:50:16 	php-fpm[48969]: /rc.newwanip: Creating rrd update script
Apr 9 03:50:18 	php-fpm[48969]: /rc.newwanip: pfSense package system has detected an IP change or dynamic WAN reconnection - aa.bb.cc.dd -> aa.bb.cc.dd - Restarting packages.
Apr 9 03:50:18 	check_reload_status: Starting packages
Apr 9 03:50:19 	php-fpm[63813]: /rc.start_packages: Restarting/Starting all packages.
Apr 9 03:50:19 	php-fpm[63813]: /rc.start_packages: Reloading Squid for configuration sync
Apr 9 03:50:19 	check_reload_status: Reloading filter
Apr 9 03:50:20 	php-fpm[63813]: /rc.start_packages: Not calling package sync code for dependency squid of squid because some include files are missing.
Apr 9 03:50:21 	php-fpm[394]: /rc.newipsecdns: IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
Apr 9 03:50:23 	check_reload_status: Syncing firewall
Apr 9 03:50:23 	php-fpm[36537]: /rc.newipsecdns: IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.
Apr 9 03:50:23 	check_reload_status: Reloading filter
Apr 9 03:50:24 	check_reload_status: updating dyndns WAN_FREE_DHCP
Apr 9 03:50:24 	check_reload_status: Restarting ipsec tunnels
Apr 9 03:50:24 	check_reload_status: Restarting OpenVPN tunnels/interfaces
Apr 9 03:50:24 	check_reload_status: Reloading filter
Apr 9 03:50:25 	php-fpm[4154]: /rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Reloading endpoints that may use WAN_FREE_DHCP.

... same logs in loop

Apr 9 06:12:22 	check_reload_status: Reloading filter
Apr 9 06:12:54 	check_reload_status: updating dyndns WAN_FREE_DHCP
Apr 9 06:12:54 	check_reload_status: Restarting ipsec tunnels
Apr 9 06:12:54 	check_reload_status: Restarting OpenVPN tunnels/interfaces
Apr 9 06:12:54 	check_reload_status: Reloading filter
Apr 9 06:12:55 	php-fpm[91563]: /rc.openvpn: OpenVPN: One or more OpenVPN tunnel endpoints may have changed its IP. Reloading endpoints that may use WAN_FREE_DHCP.
Apr 9 06:13:10 	php-fpm[79021]: /rc.newipsecdns: IPSEC: One or more IPsec tunnel endpoints has changed its IP. Refreshing.

... here i logged in and disable/reenabled WANGW and all started to work again:

Apr 9 07:41:53 	check_reload_status: Syncing firewall
Apr 9 07:41:56 	php-fpm[3042]: /system_gateways.php: ROUTING: setting default route to xx.xx.xx.xx
      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.