Messages

[WAN link goes away]

(UPDATE #1: the issue has finally been fixed through a BIOS/UEFI-Firmware update, see posting #44 in this thread for details: https://forum.opnsense.org/index.php?topic=5511.msg28681#msg28681)

(UPDATE #2: after many days of tests, the problem came up again - see https://forum.opnsense.org/index.php?topic=5511.msg28781#msg28781 for details)

Hi all,

I'm trying to analyze a strange issue: sometimes (very rare, I was only able to reproduce the issue 2 times), the WAN link goes away. From a laptop behind the OPNsense firewall I am not able to ping the WAN's default gateway anymore. I still can access the OPNsense system.

Details:

• Hardware based on JBC390F541AA-19-B (System: http://www.jetwaycomputer.com/JBC390F541AA.html, Mainboard: http://www.jetwaycomputer.com/NF541.html, 2 4quad Port NICs: http://www.jetwayipc.com/content/?ADPIE1ILAN4_3868.html)
• current OPNsense version 17.1.9 with FreeBSD 11.0-RELEASE-p10
• LAN is on igb0, WAN on igb9
• An "ifconfig igb9 down" followed by an "ifconfig igb9 up" fixes the issue - like also described in this thread here: https://forum.opnsense.org/index.php?topic=4850.msg21238#msg21238
• I was able to reproduce the issue only two times. It occurred soon after booting the OPNsense machine. I do not get any hints in /var/log/system.log.
• I have attached a zip file with the output of various tools.
• Unfortunately I have not checked the ARP cache when the problem occurred. In case I can reproduce it again, I'll check that.
• I have also tried pfSense 2.3.4. I was not able to reproduce the error there, but this may have been just luck, or it works there 'cause they use the older FreeBSD 10.3 compared to FreeBSD 11.0.

Have you ever seen an issue like this?
Do you have any hints what I could do to further analyze the issue?

Thanks in advance and best regards,
Werner

Hi Frank, hi Franco,

sorry for my late reply - I've been out-of-office for some time :-)

Thank you for your valuable answers. I have written a wiki article (in German) and included the information regarding os-monit: https://www.thomas-krenn.com/de/wiki/OPNsense_Software_RAID_1

So thanks again for your help :-)
Best regards,
Werner

Hi Franco,

thanks for your friendly and helpful answer. I'm happy that you will continue to support all the hardware that boots the underlying FreeBSD version :)

Thank you very much,
best regards,
Werner

Hi everyone,

I just noticed that "pfSense Community Edition version 2.5" will depend on a Intel CPU with AES-NI support:
https://www.netgate.com/blog/pfsense-2-5-and-aes-ni.html

Are there any plans at OPNsense, to remove support for non-AES-NI CPUs in the future, too?

Best regards,
Werner

Thank you for the hint how to monitor the SMART status of the disks.

I've installed the plugin and added the widget.

Although this shows me the SMART status of the two disks, it does not show the the status of the GEOM mirror (gmirror) which should be "COMPLETE" like it is shown by pfSense here: https://www.thomas-krenn.com/de/wikiDE/images/3/30/PfSense-GEOM-02-Diagnostics-GEOM-Mirrors.png

Any other ideas if there is a way to monitor the gmirror state?

Otherwise I think a new plugin should be implemented for that. So if there are no other ideas, I'll open a GitHub issue here https://github.com/opnsense/plugins (they state: "Now we need your help to enrich the plugins. Feel free to contact us at project AT opnsense DOT org or open GitHub issue to get in touch.")

Hi all,

first of all thank you for providing OPNsense :-)
I've installed OPNsense 17.1.4-amd64 on a server with two SATA SSDs, and I have set up a GEOM Mirror during installation. I have used the target "mirror/OPNSenseMirror" as you can see in this screenshot:
https://www.thomas-krenn.com/de/wikiDE/images/9/9b/OPNsense-Installation-GEOM-07-Select-a-Disk.png

I'm now looking for a way to monitor the status of the gmirror, and I have searched in the web interface for such an option (but I did not find a site or widget for that). I only found this https://github.com/mibuthu/opnsense-core/blob/master/src/sbin/gmirror_status_check.php on a GitHub fork.
In pfSense, there are options to monitor the status: https://www.thomas-krenn.com/de/wiki/PfSense_Software_RAID_1#.C3.9Cberwachung

My questions:

• Are there currently any options to monitor the status of a gmirror?
• If not: are there any options planned for this?
• If there are no options planned currently: should I open a github issue here: https://github.com/opnsense/core/issues ?

Thank you & best regards,
Werner