Opnsense 23.1 on Sophos SG210 v.2 hardware issue with Intel i210

[britri]

Hi all,
I am new here to the forums. First post actually.
I have been using Opnsense for a while now in my home lab.
Been running the latest on some old Cisco ASA 5515-x no issues. with ver. 23.1 and latest updates as of yesterday.
I received a Sophos SG-210 V.2 fresh install of 23.1 and all updates as of yesterday, and the wan port just goes down randomly and stays down. Port lights are still on.
Almost like the firewall is blocking everything, I can always access the GUI. But when I ping thru the wan port on igb1 to the gateway address no return.

I set up a ping -t thru the Firewall to the WAN gateway address. After a reboot I will get replies for a may 30sec and then fails. If I change any WAN interface setting in the GUI and save and apply i will get a ping reply for about 30seconds and then fails.

I have also noticed a few times after reboot the LAN port igb0, the led lights will come on and go off in repetition. A reboot seems to solve that issue.  Flapping??

I have a feeling it is an igb driver issue, the Sophos SG210 v.2 is using it appears Intel I210.

I have seen several reports of i211 flapping issues, but not exactly the same issue I have.

Any thoughts or something I can try? I may roll back to the previous Opnsense versioon before the BSD change and see if that fixes the issue. And last resort try PFsense and see.

I cannot rule out a possible hard ware issue with the SG210 its self, not sure what issue it could be but always a possibility.

Thanks for help in advance, I am kind of a knob at this stuff trying to learn, so it take it easy on me. LOL
Really love the Opnsense project, PFsense for a long time and discovered Opnsense about a year and half ago and never looked back! You guys do great work!!!
I laugh at the release update notes sometimes, the way the are written up, yes I read the notes. Lets me know the person writing them have a sense of humor.

Thanks again fellas.

[britri]

Update ...
 i tried using opnsense 27.1 with bsd 12.1, still have issue. fresh install. still failing.

loaded pfsense latest avaliable fresh install works fine.

guess i will stick with pfsense. :'(

noticed the lcdproc on pfsense works much better on the sg210 v.2 also.

[britri]

This is the post I was referencing https://forum.opnsense.org/index.php?topic=27299.60

Although I was not spoofing.

Seemed to be an issue with Intel Nics. That Post is all over the place though, hard to decipher and pin the problem down.
I feel for the guys like franco, that have to break that info down to fix it.

Not sure why Latest PFsenseCE works fine and Latest Opnsense does not on this Sophos hardware.
I was thinking a BSD issue, and very well may. But I would think Opnsense would of started working when I loaded older version of Opnsense.

[cookiemonster]

I wouldn't look at that thread for anything other than hints of what might be a problem related to your hardware. Unfortunately many people with problems with different  root causes just went to assume there was a single problem that caused "flapping". If I recall correctly there were some changes in the version that needed people to revisit their configuration ie VLANs settings.
If you can load the other distribution that works fine, I'd be tempted to list all the tunables appearing and their values and compare them with the ones in OPN, in case the interfaces as an example benefit from disabling an energy efficiency setting that sends them to sleep or similar.
Also when the behaviour is off, check the interface settings via the console, and dmesg. Hopefully there'll be hints.

[britri]

Thanks for the reply,,,Your Energy EFF. gets me thinking...
Digging thru the Googlenets when trouble shooting. I found a short post commenting about an issue with i210 and i211 driver issues on FreeBSD relating to Energy Effiency and the port basically going dead. A reboot or configuration change basically woke it up, untill it went to sleep again. (my case 30seconds).

The issue was supposedly fixed and was an intel known driver issue and I think FreeBSD was waiting for a new driver to be released. But that was several years ago post if I recall. So I did not look any further.

I know many people run PF and OPNsense on Old SG210 hardware, but I think many use V.1 hardware, I have v.2, and it may use a different intel chipset.

Thnks again for your comment.