The only time I can ping the edgerouter is with a clean config. I cp /opt/vyatta/etc/config.boot.default /config/config.boot then reboot. Set my laptop (running Linux Mint 17.3) to FixedIP at 192.168.1.1. I watch the reboot using minicom over serial usb cable. It goes all the way to the login.
Connect to screen is fine, and I am prompted to run the wizard. I do, setting up WAN + 2LAN2 and don't enable eth1. Accepting all the other defaults. Save, reboot, and yes I am sure.
Watch reboot in serial console window, when I get the login screen, set laptop to dhcp, and connect to eth2 on the edgerouter. This is where I have issues. Can't connect, Don't get an IP address. Ok, so set laptop NetworkManager to FixedIP2 with is 192.168.2.10. I get the connect icon on the laptop. Try ping -c2 192.168.2.1 - Fails. The command ifconfig returns:
18:14:40.854283 IP (tos 0x10, ttl 128, id 0, offset 0, flags [none], proto UDP (17), length 328)
0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 5c:26:0a:4d:a3:6b, length 300, xid 0x85061774, Flags [none] (0x0000)
Client-Ethernet-Address 5c:26:0a:4d:a3:6b
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Discover
Requested-IP Option 50, length 4: 192.168.2.211
Hostname Option 12, length 4: "mini"
Parameter-Request Option 55, length 18:
Subnet-Mask, BR, Time-Zone, Default-Gateway
Domain-Name, Domain-Name-Server, Option 119, Hostname
Netbios-Name-Server, Netbios-Scope, MTU, Classless-Static-Route
NTP, Classless-Static-Route, Classless-Static-Route-Microsoft, Static-Route
Option 252, NTP
18:14:43.657614 IP (tos 0x10, ttl 128, id 0, offset 0, flags [none], proto UDP (17), length 328)
0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 5c:26:0a:4d:a3:6b, length 300, xid 0x85061774, secs 3, Flags [none] (0x0000)
Client-Ethernet-Address 5c:26:0a:4d:a3:6b
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Discover
Requested-IP Option 50, length 4: 192.168.2.211
Hostname Option 12, length 4: "mini"
Parameter-Request Option 55, length 18:
Subnet-Mask, BR, Time-Zone, Default-Gateway
Domain-Name, Domain-Name-Server, Option 119, Hostname
Netbios-Name-Server, Netbios-Scope, MTU, Classless-Static-Route
NTP, Classless-Static-Route, Classless-Static-Route-Microsoft, Static-Route
Option 252, NTP
turn on tcpdump -v -v -n -c 100 -i eth0 and try dhcp again. Here is what is shown:
18:14:40.854283 IP (tos 0x10, ttl 128, id 0, offset 0, flags [none], proto UDP (17), length 328)
0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 5c:26:0a:4d:a3:6b, length 300, xid 0x85061774, Flags [none] (0x0000)
Client-Ethernet-Address 5c:26:0a:4d:a3:6b
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Discover
Requested-IP Option 50, length 4: 192.168.2.211
Hostname Option 12, length 4: "mini"
Parameter-Request Option 55, length 18:
Subnet-Mask, BR, Time-Zone, Default-Gateway
Domain-Name, Domain-Name-Server, Option 119, Hostname
Netbios-Name-Server, Netbios-Scope, MTU, Classless-Static-Route
NTP, Classless-Static-Route, Classless-Static-Route-Microsoft, Static-Route
Option 252, NTP
18:14:43.657614 IP (tos 0x10, ttl 128, id 0, offset 0, flags [none], proto UDP (17), length 328)
0.0.0.0.68 > 255.255.255.255.67: [udp sum ok] BOOTP/DHCP, Request from 5c:26:0a:4d:a3:6b, length 300, xid 0x85061774, secs 3, Flags [none] (0x0000)
Client-Ethernet-Address 5c:26:0a:4d:a3:6b
Vendor-rfc1048 Extensions
Magic Cookie 0x63825363
DHCP-Message Option 53, length 1: Discover
Requested-IP Option 50, length 4: 192.168.2.211
Hostname Option 12, length 4: "mini"
Parameter-Request Option 55, length 18:
Subnet-Mask, BR, Time-Zone, Default-Gateway
Domain-Name, Domain-Name-Server, Option 119, Hostname
Netbios-Name-Server, Netbios-Scope, MTU, Classless-Static-Route
NTP, Classless-Static-Route, Classless-Static-Route-Microsoft, Static-Route
Option 252, NTP
This continues until if eventally quits. No IP address.
Here is the config:
ubnt@ubnt:/config$ cat config.boot
firewall {
all-ping enable
broadcast-ping disable
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name WAN_IN {
default-action drop
description "WAN to internal"
rule 10 {
action accept
state {
established enable
related enable
}
description "Allow established/related"
}
rule 20 {
action drop
state {
invalid enable
}
description "Drop invalid state"
}
}
name WAN_LOCAL {
default-action drop
description "WAN to router"
rule 10 {
action accept
state {
established enable
related enable
}
description "Allow established/related"
}
rule 20 {
action drop
state {
invalid enable
}
description "Drop invalid state"
}
}
receive-redirects disable
send-redirects enable
source-validation disable
syn-cookies enable
}
interfaces {
ethernet eth0 {
address dhcp
description Internet
duplex auto
poe {
output off
}
firewall {
in {
name WAN_IN
}
local {
name WAN_LOCAL
}
}
speed auto
}
ethernet eth1 {
address 192.168.1.1/24
description Local
duplex auto
poe {
output off
}
speed auto
}
ethernet eth2 {
description "Local 2"
duplex auto
poe {
output off
}
speed auto
}
ethernet eth3 {
description "Local 2"
duplex auto
poe {
output off
}
speed auto
}
ethernet eth4 {
description "Local 2"
duplex auto
poe {
output off
}
speed auto
}
loopback lo {
}
switch switch0 {
address 192.168.2.1/24
description "Local 2"
switch-port {
interface eth2
interface eth3
interface eth4
}
}
}
service {
dhcp-server {
disabled false
hostfile-update disable
shared-network-name LAN2 {
authoritative enable
subnet 192.168.2.0/24 {
default-router 192.168.2.1
dns-server 192.168.2.1
lease 86400
start 192.168.2.38 {
stop 192.168.2.243
}
}
}
}
dns {
forwarding {
cache-size 150
listen-on eth1
listen-on switch0
}
}
gui {
https-port 443
}
nat {
rule 5010 {
outbound-interface eth0
type masquerade
description "masquerade for WAN"
}
}
ssh {
port 22
protocol-version v2
}
}
system {
host-name ubnt
login {
user ubnt {
authentication {
encrypted-password $6$7LkBv7C9jGPEgJ/$3L4tCDvBNppAgYL3nClwctES2Y4F9WCE5TgvlYeMUH0rboAOHJlYpzB/uY4M0NmNgIxTn3.
}
level admin
}
}
ntp {
server 0.ubnt.pool.ntp.org {
}
server 1.ubnt.pool.ntp.org {
}
server 2.ubnt.pool.ntp.org {
}
server 3.ubnt.pool.ntp.org {
}
Thank you,
Ken