Strange behaviour with fresh install of OPNSense, R86S and SFP+

[mikael1985]

Hello!

I am trying to replace the router sent from my ISP with a custom OPNSense router with R86S hardware. My internet connection is fiber 10 Gbps. I have successfully installed OPNSense, latest version.

I have added a text file /boot/loader.conf.local with contents "mlx4en_load="YES"" and assigned the different SFP+ ports as WAN and another for LAN. The LAN goes to a 10 Gbps switch.

After running the wizard in OPNSense and entering DNS servers of 8.8.8.8 and 1.1.1.1, I can only visit some pages but most of the Internet is not working at all. What could be the issue here?


This works:
Google works fine i browser

Opnsense.org works fine. I can also update OPNSense through the web gui

fast.com and fast cli speed test works fine

What does not work;
Everything else. Everything I try with "ping" fails, both from my Macbook Pro and from the OPNSense Web GUI.

[Greg_E]

Did you check the box to use the router as a DNS server? I'm guessing you can ping all kinds of IP, just not by name which points to a DNS issues of some kind (It's always DNS).

[mikael1985]

I can not ping any IP address. I tried "ping 1.1.1.1" and "ping 8.8.8.8" for instance.

I have not checked any checkbox to use router as DNS server what I can remember. Is that checkbox the "use system nameservers" in query forwarding (your screenshot)?

[Greg_E]

If you can't ping an ip, then something else is wrong.

[ProximusAl]

I'm using an R86S in the exact same config as you with a 10G WAN SFP+ and the other as a 10G LAN SFP+, and I use one of the 2.5G RJ45 as a management port.

I know it doesn't really help you, but I have no issues whatsoever with mine.

[dev4openid]

Hi,

may I suggest you have not permitted ICMP.
Check if you have a rule
    Action: Pass
    Protocol: ICMP
    ICMP subtypes: Echo request
    Source: any
    Destination: WAN
    Description: Allow ping on WAN

I had similar problem on a different platform but same solution

[mikael1985]

I haven't touched the rules, but I'll give it a try.

[mikael1985]

I'm using an R86S in the exact same config as you with a 10G WAN SFP+ and the other as a 10G LAN SFP+, and I use one of the 2.5G RJ45 as a management port.

I know it doesn't really help you, but I have no issues whatsoever with mine.

Good to know that it works for you! Did you also add the loader.conf.local in /boot directory?

[ProximusAl]

Yes indeed.

[mikael1985]

Would it be possible for you to share your OPNSense configuration somehow? E.g. which SFP+ port is your WAN/LAN. Nothing sensitive of course!