Loss of outgoing connectivity after upgrade from 22.7.11 -> 23.1

[guywyers]

Hi all,

I'm experiencing an issue with outgoing WAN connectivity when I upgrade to 23.1.
I did a rollback to 22.7.11 and the problems disappeared.

The problem manifests itself when I do a ping, I get a "no route to host" error.
I found some similar issues reported in the forums, but most of these users have more complicated configurations and, in any case, I tried all the suggestions given there, nothing helps.

Any idea would be welcome.

Thanks.

[guywyers]

Anybody?

[xsven]

same observation, could not roll back yet but switched to a second device after the failure. can not communicate to wan interface after upgrade. ping, up to the wan interface, works.

[franco]

# /usr/local/etc/rc.routing_configure

This command should bring back connectivity.


Cheers,
Franco

[franco]

PS: If the command above helps there is more info here https://forum.opnsense.org/index.php?topic=32347.msg158475#msg158475

[xsven]

THX Franco, unfortunately no success - gateway still offline 

(see attachment)

PS just recognised: its an upgrade from 21.7.8 to 22.1 in my case

[xsven]

ping on some interface works, on a fritz box "behind" wan interface of opnsense gives error as attached

[guywyers]

Hi Franco,

Same here. I booted up a 23.1 from live-media to ease the rollback, but your suggestion did not solve the problem.

 

[franco]

>  21.7.8 to 22.1

Ok, wasn't meant for that when posting in 23.1 forum I'm not sure there will be much help anymore to get a 22.1 running. Better to try 23.1 but mind you FreeBSD 13 is the default since 22.1 which has caused a few things to change that "always worked" before because then the kernel was less strict.

If workaround suggested doesn't work it's likely another issue entirely and so we need more data points.


Cheers,
Franco

[guywyers]

Hi Franco,

Can you be more specific about "more data points"? Any info I should be gathering to help you progress in this?
Obviously I would like to go to the latest version as soon as possible.

Cheers.

Guy

[franco]

Try this first if connectivity on 23.1 works at all at least sometimes: https://forum.opnsense.org/index.php?topic=32347.msg158475#msg158475

I'm unsure what the problem is besides the message? What is your WAN type? Can you post the firmware connectivity audit?


Cheers,
Franco

[xsven]

Sorry, please excuse, my fault. Did recognise my current version too late. 

>  21.7.8 to 22.1

Ok, wasn't meant for that when posting in 23.1 forum I'm not sure there will be much help anymore to get a 22.1 running. Better to try 23.1 but mind you FreeBSD 13 is the default since 22.1 which has caused a few things to change that "always worked" before because then the kernel was less strict.

If workaround suggested doesn't work it's likely another issue entirely and so we need more data points.


Cheers,
Franco

[ryp43]

do you have custom tunables in your config?

check this https://forum.opnsense.org/index.php?topic=32017.15

[xsven]

Final Update: Found the issue after several (many) piecewise im- and exports of the configuration between my specific settings (starting from 22.7.11) and the defaults of 23.x.

Interfaces -> (WAN interface) -> Override MTU is set by default.

In my case, taking the ISP settings (a Fritz Box before the Firewall) by unsetting the option solved the problem of loosing WAN connectivity during firmware upgrade!

There seems to be a change in the MTU settings/setup of OpenSense which leads to change in the behaviour of that option :-/

Cheers S.

ping on some interface works, on a fritz box "behind" wan interface of opnsense gives error as attached