Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard SB5101 Cable Modem?

2007-05-17 Thread Tortise
Thanks Raj

The modems web interface is, as you suggest, present at 192.168.100.1.

The modem is being used in a transparent mode (bridging?) as the static IP is 
assigned on rl1.  So far as I can tell it is not using 
0.0 on the WAN side, it is using 3 digit numbers for the a.b.c.d IP address.

Kind regards
David

- Original Message - 
From: Rajkumar S [EMAIL PROTECTED]
To: support@pfsense.com
Sent: Thursday, May 17, 2007 5:53 PM
Subject: Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard 
SB5101 Cable Modem?


On 5/17/07, Tortise [EMAIL PROTECTED] wrote:
 rl1 = WAN and Direct connected only to the Cable modem i.e. no switch sharing.
 rl2 = LAN and connected to LAN switches.

You have 192.168.0.4 on your lan, but for some reason your cable modem
also sends arp replies for that ip. One possible reson is that your
ISP might be using 192.168.0.0 network for the HFC side of cable
modem. Try browsing to 192.168.100.1 and check if you get the cable
modem web interface. From here you can check the ip address assigned
to your modem. (I am typing from my memory, so I might be wroing about
the cable modem web interface ip)

If your ISP is using that ip range for HFC network, you will have to
change your lan ip addressing.

raj

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard SB5101 Cable Modem?

2007-05-17 Thread Bill Marquette

On 5/17/07, Tortise [EMAIL PROTECTED] wrote:

Hi Bill

for me

rl1 = WAN and Direct connected only to the Cable modem i.e. no switch sharing.
rl2 = LAN and connected to LAN switches.

Can I presume that means you have checked and confirmed there are no similar 
messages in your System Logs?


I no longer use this setup, my 5101 is sitting in my basement
collecting dust.  However, I would have noticed both the error _and_
the issue.  Other suggestions.

Check your netmask on both interfaces.  I know WAN will be DHCP, but
it's worth seeing what the ISP is sending you and confirming that it
makes sense.  Seeing as you are on a HUGE layer 2 broadcast domain,
it's entirely possible that there's some joker out there sending out
gratuitous arps - not sure offhand how to stop that in pfsense (I know
how to do it in the OS, but that won't help you here).  You can check
the arp tables on the firewall (at any time, but likely most useful
after it stops working) by doing an 'arp -an' from the command prompt.

--Bill

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



[pfSense Support] LAN / WAN disconnections - Motorola Surfboard SB5101 Cable Modem?

2007-05-16 Thread Tortise
Hi

I am finding one of my pfsense boxes is losing its internal connection between 
the LAN and WAN.  Happens maybe once a week or longer...

The WAN seems to be OK, as I recall I can ping the Internet still and ping / 
access the Motorola config page at 192.168.100.1

There are no error messages in the system log at the time of occurrence.

Running top in ssh or on the monitor looks much the same with no process 
dominating anything, although the web response may be longer.

The WAN is cable via a Motorola Surfboard SB5101.  A colleague of mine is also 
using the same pfSense and modem - and having the same issues.

We are both finding frequent logged messages of this ilk:

kernel: arp: 192.168.0.4 is on rl2 but got reply from 00:00:cd:1c:06:8c on 
rl1

In my case the cards are all of rl variety, his are xl.

Reloading the filters does not fix it.

Rebooting usually does although sometimes I seem to need to power cycle the 
modem also.  When tested the Modem has remained up as I can connect up an 
alternative NIC appropriately configured with the static IP.

It is a pain when offsite as one cannot remotely trigger a reboot to gain 
system access. 

How can I progress identifying the issue from here?  

Kind regards

David

Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard SB5101 Cable Modem?

2007-05-16 Thread Bill Marquette

Which interface is rl1..ditto for rl2.  Also, any chance that both
sides of the firewall are plugged into the same switch?  I've had the
same modem you mention running on pfsense without any problems, so
this smells of a different issue to me.

--Bill

On 5/16/07, Tortise [EMAIL PROTECTED] wrote:



Hi

I am finding one of my pfsense boxes is losing its internal connection
between the LAN and WAN.  Happens maybe once a week or longer...

The WAN seems to be OK, as I recall I can ping the Internet still and ping /
access the Motorola config page at 192.168.100.1

There are no error messages in the system log at the time of occurrence.

Running top in ssh or on the monitor looks much the same with no process
dominating anything, although the web response may be longer.

The WAN is cable via a Motorola Surfboard SB5101.  A colleague of mine is
also using the same pfSense and modem - and having the same issues.

We are both finding frequent logged messages of this ilk:

kernel: arp: 192.168.0.4 is on rl2 but got reply from 00:00:cd:1c:06:8c
on rl1

In my case the cards are all of rl variety, his are xl.

Reloading the filters does not fix it.

Rebooting usually does although sometimes I seem to need to power cycle the
modem also.  When tested the Modem has remained up as I can connect up an
alternative NIC appropriately configured with the static IP.

It is a pain when offsite as one cannot remotely trigger a reboot to gain
system access.

How can I progress identifying the issue from here?

Kind regards

David


-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard SB5101 Cable Modem?

2007-05-16 Thread Tortise
Hi Bill

for me 

rl1 = WAN and Direct connected only to the Cable modem i.e. no switch sharing.
rl2 = LAN and connected to LAN switches.

Can I presume that means you have checked and confirmed there are no similar 
messages in your System Logs?

David

- Original Message - 
From: Bill Marquette [EMAIL PROTECTED]
To: support@pfsense.com
Sent: Thursday, May 17, 2007 5:35 PM
Subject: Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard 
SB5101 Cable Modem?


Which interface is rl1..ditto for rl2.  Also, any chance that both
sides of the firewall are plugged into the same switch?  I've had the
same modem you mention running on pfsense without any problems, so
this smells of a different issue to me.

--Bill




-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard SB5101 Cable Modem?

2007-05-16 Thread Rajkumar S

On 5/17/07, Tortise [EMAIL PROTECTED] wrote:

kernel: arp: 192.168.0.4 is on rl2 but got reply from 00:00:cd:1c:06:8c
on rl1


Are they on same switch or hub? I have heard that cable modems can
cause problems if they are connected to a hub or switch.

raj

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Re: [pfSense Support] LAN / WAN disconnections - Motorola Surfboard SB5101 Cable Modem?

2007-05-16 Thread Rajkumar S

On 5/17/07, Tortise [EMAIL PROTECTED] wrote:

rl1 = WAN and Direct connected only to the Cable modem i.e. no switch sharing.
rl2 = LAN and connected to LAN switches.


You have 192.168.0.4 on your lan, but for some reason your cable modem
also sends arp replies for that ip. One possible reson is that your
ISP might be using 192.168.0.0 network for the HFC side of cable
modem. Try browsing to 192.168.100.1 and check if you get the cable
modem web interface. From here you can check the ip address assigned
to your modem. (I am typing from my memory, so I might be wroing about
the cable modem web interface ip)

If your ISP is using that ip range for HFC network, you will have to
change your lan ip addressing.

raj

-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]