[pfSense Support] Traceroute repeating itself
Following is an output from traceroute... C:\>tracert -d 114.113.93.41 Tracing route to 114.113.93.41 over a maximum of 30 hops 1<1 ms<1 ms<1 ms 192.168.1.11 2 1 ms<1 ms 1 ms 11.241.82.161 3 3 ms 5 ms 6 ms 11.241.80.109 4 3 ms 3 ms 3 ms 203.17.13.6 5 4 ms 3 ms 3 ms 59.13.55.149 6 3 ms 3 ms 3 ms 59.13.55.149 711 ms 6 ms 5 ms 29.64.42.55 8 6 ms 6 ms 6 ms 114.113.8.4 9 5 ms 5 ms 5 ms 114.113.87.44 10 6 ms 6 ms14 ms 114.113.87.43 11 5 ms 5 ms 5 ms 114.113.87.44 1212 ms *6 ms 114.113.87.43 1326 ms 8 ms13 ms 114.113.87.44 1425 ms 7 ms 8 ms 114.113.87.43 1510 ms 5 ms 5 ms 114.113.87.44 1611 ms17 ms17 ms 114.113.87.43 17 8 ms31 ms 5 ms 114.113.87.44 1817 ms19 ms16 ms 114.113.87.43 1918 ms 6 ms11 ms 114.113.87.44 20 6 ms 6 ms10 ms 114.113.87.43 21 6 ms 6 ms 6 ms 114.113.87.44 22 6 ms 6 ms 7 ms 114.113.87.43 23 6 ms 6 ms 6 ms 114.113.87.44 24 9 ms17 ms 8 ms 114.113.87.43 2556 ms64 ms25 ms 114.113.87.44 26 9 ms 7 ms14 ms 114.113.87.43 27 6 ms12 ms 6 ms 114.113.87.44 28 7 ms 7 ms 7 ms 114.113.87.43 2916 ms12 ms10 ms 114.113.87.44 30 7 ms 9 ms 8 ms 114.113.87.43 Trace complete. After the 9th hop, the traffic seems to be coming in/out of the pfsense box, is this normal... have I configured something wrong? 114.113.87.44 is the real IP of the pfsense firewall 114.113.87.43 is the VRRP IP provided to me by my ISP and is the gateway to pfsense Note: all IP are changed for this post. ShiB. while ( ! ( succeed = try() ) );
Re: [pfSense Support] Traceroute repeating itself
I don't quite understand your set up but basically you have a routing loop, you need to view and amend your routes if they are static or reconfiguring your routing protocol if your using one. --James. (This email was sent from a mobile device)
Re: [pfSense Support] Traceroute repeating itself
My setup... ISP-WAN1--> FW1 (pfsense) --> VRRP IP --> LAN ISP-WAN2--> FW2 (pfsense) The traceroute is looping between the FW1 and VRRP IP. ShiB. while ( ! ( succeed = try() ) ); On Wed, Mar 9, 2011 at 5:47 PM, James Bensley wrote: > I don't quite understand your set up but basically you have a routing loop, > you need to view and amend your routes if they are static or reconfiguring > your routing protocol if your using one. > > --James. (This email was sent from a mobile device) >
Re: [pfSense Support] Traceroute repeating itself
So WAN1 is on one pfSense box and WAN2 is on another? Also, you connect each box to an ISP and to the LAN? -- James. http://www.jamesbensley.co.cc/ There are 10 kinds of people in the world; Those who understand Vigesimal, and J others...? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Traceroute repeating itself
On Wed, Mar 9, 2011 at 6:53 PM, James Bensley wrote: > So WAN1 is on one pfSense box and WAN2 is on another? Also, you > connect each box to an ISP and to the LAN? > > -- > James. > > http://www.jamesbensley.co.cc/ > There are 10 kinds of people in the world; Those who understand > Vigesimal, and J others...? > > No... ISP gives me 1 connection. The VRRP IP is 114.113.87.43. This VRRP IP is the gateway to my pfsense boxes. The pfsense boxes get 2 wan ip, 114.113.87.44 & 114.113.87.45. ShiB. while ( ! ( succeed = try() ) );
Re: [pfSense Support] Traceroute repeating itself
> On Wed, Mar 9, 2011 at 6:53 PM, James Bensley wrote: > >> So WAN1 is on one pfSense box and WAN2 is on another? Also, you >> connect each box to an ISP and to the LAN? >> >> -- >> James. >> >> http://www.jamesbensley.co.cc/ >> There are 10 kinds of people in the world; Those who understand >> Vigesimal, and J others...? >> >> > No... ISP gives me 1 connection. The VRRP IP is 114.113.87.43. This VRRP > IP > is the gateway to my pfsense boxes. The pfsense boxes get 2 wan ip, > 114.113.87.44 > & 114.113.87.45. > > ShiB. > while ( ! ( succeed = try() ) ); > Where is 114.113.93.41 you are tracing to? - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Traceroute repeating itself
114.113.93.41 is a ip from the Routed segment/Server Segment alotted to me by my ISP. ShiB. while ( ! ( succeed = try() ) ); On Wed, Mar 9, 2011 at 8:33 PM, wrote: > > On Wed, Mar 9, 2011 at 6:53 PM, James Bensley > wrote: > > > >> So WAN1 is on one pfSense box and WAN2 is on another? Also, you > >> connect each box to an ISP and to the LAN? > >> > >> -- > >> James. > >> > >> http://www.jamesbensley.co.cc/ > >> There are 10 kinds of people in the world; Those who understand > >> Vigesimal, and J others...? > >> > >> > > No... ISP gives me 1 connection. The VRRP IP is 114.113.87.43. This VRRP > > IP > > is the gateway to my pfsense boxes. The pfsense boxes get 2 wan ip, > > 114.113.87.44 > > & 114.113.87.45. > > > > ShiB. > > while ( ! ( succeed = try() ) ); > > > Where is 114.113.93.41 you are tracing to? > > > - > To unsubscribe, e-mail: support-unsubscr...@pfsense.com > For additional commands, e-mail: support-h...@pfsense.com > > Commercial support available - https://portal.pfsense.org > >
Re: [pfSense Support] Traceroute repeating itself
> On Wed, Mar 9, 2011 at 8:33 PM, wrote: > >> > On Wed, Mar 9, 2011 at 6:53 PM, James Bensley >> wrote: >> > >> >> So WAN1 is on one pfSense box and WAN2 is on another? Also, you >> >> connect each box to an ISP and to the LAN? >> >> >> >> -- >> >> James. >> >> >> >> http://www.jamesbensley.co.cc/ >> >> There are 10 kinds of people in the world; Those who understand >> >> Vigesimal, and J others...? >> >> >> >> >> > No... ISP gives me 1 connection. The VRRP IP is 114.113.87.43. This >> VRRP >> > IP >> > is the gateway to my pfsense boxes. The pfsense boxes get 2 wan ip, >> > 114.113.87.44 >> > & 114.113.87.45. >> > >> > ShiB. >> > while ( ! ( succeed = try() ) ); >> > >> Where is 114.113.93.41 you are tracing to? >> >> 114.113.93.41 is a ip from the Routed segment/Server Segment alotted to me > by my ISP. > > ShiB. > while ( ! ( succeed = try() ) ); > > I do not get it -) Is it on your pfSense boxes? behind them? or on provider's side? Please do not top-post. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Traceroute repeating itself
On Wed, Mar 9, 2011 at 10:20 AM, Shibashish wrote: > 114.113.93.41 is a ip from the Routed segment/Server Segment alotted to me > by my ISP. If you have a routed subnet that isn't assigned on a local interface, and that doesn't have traceroute directed to another host via NAT, you'll have a routing loop. It doesn't affect functionality and is normal under such circumstances. Forward traceroute to another host via 1:1 or port forward entries, or assign the subnet directly to an internal interface, and it won't do that. It doesn't have a routing table entry for that host as is so it sends it back to its default gateway. - To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org
Re: [pfSense Support] Traceroute repeating itself
On Wed, Mar 9, 2011 at 11:30 PM, Chris Buechler wrote: > On Wed, Mar 9, 2011 at 10:20 AM, Shibashish wrote: > > 114.113.93.41 is a ip from the Routed segment/Server Segment alotted to > me > > by my ISP. > > If you have a routed subnet that isn't assigned on a local interface, > and that doesn't have traceroute directed to another host via NAT, > you'll have a routing loop. It doesn't affect functionality and is > normal under such circumstances. Forward traceroute to another host > via 1:1 or port forward entries, or assign the subnet directly to an > internal interface, and it won't do that. It doesn't have a routing > table entry for that host as is so it sends it back to its default > gateway. > > - > > Works the way as you have described... awesome.. thanks man ! > > ShiB. > while ( ! ( succeed = try() ) ); >