Hello,
I am currently trying to build a small OpenBSD home-router using a
Nexcom 2120 appliance.
The setup looks like this:
Computer (192.168.1.99) > Router > Modem > Internet
The router has 6 Intel 82583V GbE interfaces - em0 to em5.
- em0 is configured as the PPPoE uplink.
- em1 is not used yet
- em2 to em5 are configured as a bridge.
- There is a WIFI AP on em3
- My test computer (Linux) is plugged into em4
There is a serial console I use to debug.
The bridge has an ip address that is set on em2: 192.168.1.1/24
IP forwarding is enabled, there is also a small pf firewall for
scrubbing / NAT.
Everything is working well - for a few hours, until em2 decides not to
reply to ARP requests anymore.
Doing an ARP request from my computer to 192.168.1.1 will not get me
any reply - although I can see the requests coming in on em2 on the
router with tcpdump. The tcpdump running on the router also shows that
no reply is being sent via that interface. Interestingly: I can add an
ARP cache entry manually on my computer, which allows me to browse the
web again - but the interface still won't reply to ARP requests (done
using arping).
Taking the interface down and up again via ifconfig em2 down ; ifconfig
em2 up gets it to reply to ARP requests again.
I've seen a similar problem already posted here:
http://old.nabble.com/CARP-interfaces-randomly-stop-answering-ARP-requests-td33622854.html
But the answers seem to imply a relation to CARP, which I am not using.
I am very new to OpenBSD, so I might be missing something obvious - all
my apologies if that's the case.
Thanks in advance for your help.
Here are a few additional infos:
* My PF configuration:
set skip on lo
pass
match in all scrub (no-df max-mss 1440)
block drop in on pppoe0
pass in on pppoe0 proto tcp to port 2208
pass out on pppoe0 from em2:network to any nat-to (pppoe0)
* A full ifconfig:
# ifconfig
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33152
priority: 0
groups: lo
inet6 ::1 prefixlen 128
inet6 fe80::1%lo0 prefixlen 64 scopeid 0x8
inet 127.0.0.1 netmask 0xff000000
em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:10:f3:21:ab:1e
priority: 0
media: Ethernet autoselect (100baseTX full-duplex,rxpause,txpause)
status: active
inet6 fe80::210:f3ff:fe21:ab1e%em0 prefixlen 64 scopeid 0x1
em1: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500
lladdr 00:10:f3:21:ab:1f
priority: 0
media: Ethernet autoselect (none)
status: no carrier
em2: flags=8b43<UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST>
mtu 1500
lladdr 00:10:f3:21:ab:20
priority: 0
media: Ethernet autoselect (none)
status: no carrier
inet 192.168.1.1 netmask 0xffffff00 broadcast 192.168.1.255
inet6 fe80::210:f3ff:fe21:ab20%em2 prefixlen 64 scopeid 0x3
em3: flags=8b43<UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST>
mtu 1500
lladdr 00:10:f3:21:ab:21
priority: 0
media: Ethernet autoselect (100baseTX full-duplex,rxpause,txpause)
status: active
inet6 fe80::210:f3ff:fe21:ab21%em3 prefixlen 64 scopeid 0x4
em4: flags=8b43<UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST>
mtu 1500
lladdr 00:10:f3:21:ab:22
priority: 0
media: Ethernet autoselect (1000baseT
full-duplex,master,rxpause,txpause)
status: active
inet6 fe80::210:f3ff:fe21:ab22%em4 prefixlen 64 scopeid 0x5
em5: flags=8b43<UP,BROADCAST,RUNNING,PROMISC,ALLMULTI,SIMPLEX,MULTICAST>
mtu 1500
lladdr 00:10:f3:21:ab:23
priority: 0
media: Ethernet autoselect (none)
status: no carrier
inet6 fe80::210:f3ff:fe21:ab23%em5 prefixlen 64 scopeid 0x6
enc0: flags=0<>
priority: 0
groups: enc
status: active
pppoe0: flags=8851<UP,POINTOPOINT,RUNNING,SIMPLEX,MULTICAST> mtu 1492
priority: 0
dev: em0 state: session
sid: 0x166e PADI retries: 1 PADR retries: 0 time: 12:32:43
sppp: phase network authproto pap authname "03053096355"
groups: pppoe egress
status: active
inet6 fe80::210:f3ff:fe21:ab1e%pppoe0 -> prefixlen 64 scopeid 0x9
inet [commented out] --> [commented out] netmask 0xffffffff
bridge0: flags=41<UP,RUNNING>
groups: bridge
priority 32768 hellotime 2 fwddelay 15 maxage 20 holdcnt 6 proto
rstp
em5 flags=3<LEARNING,DISCOVER>
port 6 ifpriority 0 ifcost 0
em4 flags=3<LEARNING,DISCOVER>
port 5 ifpriority 0 ifcost 0
em3 flags=3<LEARNING,DISCOVER>
port 4 ifpriority 0 ifcost 0
em2 flags=3<LEARNING,DISCOVER>
port 3 ifpriority 0 ifcost 0
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33152
priority: 0
groups: pflog
