Project

General

Profile

Actions

Regression #11444

closed

SG-3100 doesn't pass traffic after upgrade to 21.02

Added by Viktor Gurov about 3 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
Rules / NAT
Target version:
Start date:
02/18/2021
Due date:
% Done:

0%

Estimated time:
Release Notes:
Affected Plus Version:
21.02
Affected Architecture:
SG-3100

Description

After upgrading SG-3100 to pfSense Plus 21.02 NAT stopped working.

Test:

LAN PC (192.168.10.132):

mypc# ping sf.net
PING sf.net (216.105.38.13) 56(84) bytes of data.

pfSense states:

# pfctl -ss | grep 216.105.38.13
mvneta1 icmp 216.105.38.13:20459 <- 192.168.10.132:20459       0:0
mvneta2 icmp 192.168.21.100:24313 (192.168.10.132:20459) -> 216.105.38.13:24313       0:0

LAN side:

# tcpdump -qn -i mvneta1 host 216.105.38.13
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on mvneta1, link-type EN10MB (Ethernet), capture size 262144 bytes
18:13:34.513867 IP 192.168.10.132 > 216.105.38.13: ICMP echo request, id 20459, seq 92, length 64
18:13:35.513810 IP 192.168.10.132 > 216.105.38.13: ICMP echo request, id 20459, seq 93, length 64
18:13:36.513679 IP 192.168.10.132 > 216.105.38.13: ICMP echo request, id 20459, seq 94, length 64

WAN side (192.168.21.100 - ISP gateway):

tcpdump -qn -i mvneta2 host 216.105.38.13
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on mvneta2, link-type EN10MB (Ethernet), capture size 262144 bytes
18:13:53.513009 IP 192.168.21.100 > 216.105.38.13: ICMP echo request, id 24313, seq 111, length 64
18:13:53.735893 IP 216.105.38.13 > 192.168.21.100: ICMP echo reply, id 24313, seq 111, length 64
18:13:54.513111 IP 192.168.21.100 > 216.105.38.13: ICMP echo request, id 24313, seq 112, length 64
18:13:54.713096 IP 216.105.38.13 > 192.168.21.100: ICMP echo reply, id 24313, seq 112, length 64

from /tmp/rules.debug:

nat on $WAN1 inet from any to any -> 192.168.21.100/32 port 1024:65535

# pfctl -sn | grep 21.100
nat on mvneta2 inet all -> 192.168.21.100 port 1024:65535

strange issues on boot:

pid 401 (php-cgi), jid 0, uid 0: exited on signal 11 (core dumped)
e6000sw0port4: link state changed to UP
ovpnc1: link state changed to UP
e6000sw0port2: link state changed to UP
pid 358 (php-fpm), jid 0, uid 0: exited on signal 11 (core dumped)

LAN PC connected to e6000sw0port2 (untagged)


Files

OS-Message Buffer.txt (15.5 KB) OS-Message Buffer.txt Viktor Gurov, 02/18/2021 09:28 AM
Network-Switch Configuration.txt (701 Bytes) Network-Switch Configuration.txt Viktor Gurov, 02/18/2021 09:29 AM
Actions

Also available in: Atom PDF