Koozali.org: home of the SME Server

Pfsense and SME 9.2

Offline jmvelez

  • ***
  • 85
  • +0/-0
    • http://velezcomputer.com
Pfsense and SME 9.2
« on: December 16, 2017, 05:33:59 PM »
I built a second server with 9.2 to upgrade my old 8.X.  I have a pfsense with two wan and a lan port to SME server (server and gateway).  with 8.X I can enter my Pfsense server web manager and with 9.2 I can not connect to Pfsense and many web sites (some work).  The 9.2 is a new install and restored with AFFA rise command without any issue.

Any Idea why

Offline Stefano

  • *
  • 10,836
  • +2/-0
Re: Pfsense and SME 9.2
« Reply #1 on: December 16, 2017, 05:37:37 PM »
"It doesn't work" without any other further info doesn't help us to help you
We need more details

Offline jmvelez

  • ***
  • 85
  • +0/-0
    • http://velezcomputer.com
Re: Pfsense and SME 9.2
« Reply #2 on: December 16, 2017, 05:42:10 PM »
"It doesn't work" without any other further info doesn't help us to help you
We need more details

I can Ping the PFsense 192.168.0.1 but the web says unable to connect.  The same thing if I try to connect to the cable modem at IP 192.168.10.1.  My LAN IP is 192.168.1.X

Offline Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Pfsense and SME 9.2
« Reply #3 on: December 16, 2017, 06:33:38 PM »
I can Ping the PFsense 192.168.0.1 but the web says unable to connect.  The same thing if I try to connect to the cable modem at IP 192.168.10.1.  My LAN IP is 192.168.1.X
Those are 3 potentially differents subnetwork.  Meaning your might have missed some routing somewhere down the line. Either on the pfsens side or on the sme9 by defining either local networks or adding allowed ip or subnet to access the manager in server manager local network or remote access menus. This is what to check on the sme side. I do not know anything about pfsense, so you will have to investigate this part too.


Is the sme8 still up?
If yes my guess is that Also might have ip conflict ( if same ips were set with the restore process) or rules missings to point to the new servers (if it has a new ip set) as another possibility.


Thise are only possibilities as those 3 ip in potentially different subnetwork, would need a full drawing of your network and ips to better help you.


Offline jmvelez

  • ***
  • 85
  • +0/-0
    • http://velezcomputer.com
Re: Pfsense and SME 9.2
« Reply #4 on: December 16, 2017, 07:16:50 PM »
1. SME 8 is not connected.  SME 8 and 9 have the same IP configuration.
2. WAN IP is 192.168.0.2 and LAN IP is 192.168.1.1  With SME 8 I can reach 192.168.0.1 (pfsense) and 192.168.10.1 (cable Modem connected to Pfsense) from any PC in the LAN.  SME9 does not with the message Unable to connect.  With SME9 I can ping 192.168.0.1 and 192.168.10.1 but can not connect to them via web. 

Offline Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Pfsense and SME 9.2
« Reply #5 on: December 16, 2017, 07:30:59 PM »
1. SME 8 is not connected.  SME 8 and 9 have the same IP configuration.
2. WAN IP is 192.168.0.2 and LAN IP is 192.168.1.1  With SME 8 I can reach 192.168.0.1 (pfsense) and 192.168.10.1 (cable Modem connected to Pfsense) from any PC in the LAN.  SME9 does not with the message Unable to connect.  With SME9 I can ping 192.168.0.1 and 192.168.10.1 but can not connect to them via web.

Are ping sent from the sme9 command line or from a clent on the lan of sme ?

When you say can not connect via web: from a client on the sme9 lan? Or from the sme using elinks as an example?

Offline jmvelez

  • ***
  • 85
  • +0/-0
    • http://velezcomputer.com
Re: Pfsense and SME 9.2
« Reply #6 on: December 16, 2017, 07:45:39 PM »
I can ping from SME 9 server and from a client in the LAN.  The unable to connect is from a Windows Client in the LAN.  I can ping from windows 192.168.10.1 cable modem and 192.168.0.1 Pfsense.

Offline Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: Pfsense and SME 9.2
« Reply #7 on: December 16, 2017, 07:54:43 PM »
Can you try from the sme using elinks as webbrowser on the command line ?

Also, are you aware of any routing or filtering set on a mac adress basis on either the pfsense or the modem, this could  cause a similar issue.  Maybe the external mac adress of the sme8 is still somewhere instead of the one of the sme9.

Offline jmvelez

  • ***
  • 85
  • +0/-0
    • http://velezcomputer.com
Re: Pfsense and SME 9.2
« Reply #8 on: December 16, 2017, 08:16:44 PM »
"Also, are you aware of any routing or filtering set on a mac adress basis on either the pfsense or the modem, this could  cause a similar issue.  Maybe the external mac adress of the sme8 is still somewhere instead of the one of the sme9."

I assume that and reconfigured the LAN port in Pfsense (renter the IP Like a new configuration) following the recommendation on Pfsense site.  I have reboot Pfsense.  I can not test now the web from the server since I installed 8.2 back again and I am out of the office

Offline jmvelez

  • ***
  • 85
  • +0/-0
    • http://velezcomputer.com
Re: Pfsense and SME 9.2
« Reply #9 on: March 07, 2018, 12:15:08 AM »
Can you try from the sme using elinks as webbrowser on the command line ?

Also, are you aware of any routing or filtering set on a mac adress basis on either the pfsense or the modem, this could  cause a similar issue.  Maybe the external mac adress of the sme8 is still somewhere instead of the one of the sme9.

My SME 8.2 died in a power failure with a kernel panic error.  I installed the 9.2 server and turn off the proxy on the server manager and was able to connect to the Pfsense.  The 8.2 died on the worse moment (it was doing backup with AFFA and I had reformatted the USB drive since it was full.)  I was able to restore the Ibays but not the zarafa files.  Thank You