Cannot route to internet after upgrade

[dfw3xam1n3r]

Upgraded to 24.1_1, cannot ping out to the internet now. Not sure what changed.

Pinging from OPNsense command line:

PING 8.8.8.8 (8.8.8.: 56 data bytes
ping: sendto: No route to host

Has anyone else seen this?

I have stopped suricata, zenarmor, crowdsec, and nothing seems to help.

[Saarbremer]

Check your default gateway for IPv4. It went missing on my box after the upgrade. I had to manually create it (static ip configuration).

You might also want to have a look at the gateway config in the WAN interface, being set to Auto-Config.

[dfw3xam1n3r]

Thanks for the quick reply! That was definitely it.

[tiophamu]

Check your default gateway for IPv4. It went missing on my box after the upgrade. I had to manually create it (static ip configuration).

You might also want to have a look at the gateway config in the WAN interface, being set to Auto-Config.

Thank you, that also fixed my issue. I still have two question:
* Do you, or someone else, know why the default gateway was deleted?
* Why do you recommend to set the gateway to auto-config in the settings for the wan interface?

[Saarbremer]

Hi,

I don't know about the reasons for the missing gateway. But some people here reported that earlier and I saw it on my machine, too.

The Auto-config is stated in the docs and the help for all cases where you just have 1 WAN. It furthermore prevents you from an unexpected routing behavior in cases where a second gateway in a subnet exists. It causes all traffic to take the set gateway.

[plyn]

You might also want to have a look at the gateway config in the WAN interface, being set to Auto-Config.

Could you please tell me where I can find these settings?
I went to Interfaces > [WAN] but I couldn't find an item to set to Auto-Config.

Thanks in advance for your help. 

[Saarbremer]

Check "IPv4 Upstream Gateway" settings on the interface of your LAN.

On WAN this can only be set in static config.


The docs say why this is important: https://docs.opnsense.org/manual/interfaces.html

It causes all replies to traffic coming in through the interface going out to the gateway, if defined. In networks other than transfer networks this may cause a lot of pain.

In pure 1-1 transfer networks it just doesn't matter as there are no other addressable hosts.

[plyn]

oh, my IPv4 Upstream Gateway on LAN is (and can only be) set to Auto-detect.
I guess this is what you mean by Auto-config and everything is now set correctly.
Thanks for your help!