# Single device undergoing reconnect wait loop, IT claims no firewall or IP issues

**URL:** <https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605>\
**Category:** General Discussion\
**Created:** [August 13, 2024, 4:40pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605 "2024-08-13T16:40:42Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![D\_Mitri\_Tompkins](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@D\_Mitri\_Tompkins](https://forum.inductiveautomation.com/u/D_Mitri_Tompkins)\
**Post date:** [August 13, 2024, 4:40pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/1 "2024-08-13T16:40:42Z")

</div>

![image](https://us1.discourse-cdn.com/inductiveautomation/original/3X/7/6/7670760daa3d865d77b4641cadfa22df8d8404b8.png)  
Experiencing a "classic" reconnect wait loop on this device, followed advice from prior topics on the matter but IT is claiming there is no IP Address confliction or firewall issue. Can something else cause this or are they perhaps just wrong.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 13, 2024, 5:44pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/2 "2024-08-13T17:44:17Z")

</div>

Wireshark will tell you which is the case.

---

<div class="post-metadata">

**Author:** ![D\_Mitri\_Tompkins](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@D\_Mitri\_Tompkins](https://forum.inductiveautomation.com/u/D_Mitri_Tompkins)\
**Post date:** [August 13, 2024, 5:53pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/3 "2024-08-13T17:53:33Z")

</div>

will install it and give it a try, thank you.

---

<div class="post-metadata">

**Author:** ![D\_Mitri\_Tompkins](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@D\_Mitri\_Tompkins](https://forum.inductiveautomation.com/u/D_Mitri_Tompkins)\
**Post date:** [August 14, 2024, 8:49pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/4 "2024-08-14T20:49:27Z")

</div>

How am I supposed to use wireshark in this instance? Starting it with a filter for that possibly conflicted address then ping said address in command prompt or some other way?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 14, 2024, 8:52pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/5 "2024-08-14T20:52:55Z")

</div>

Yes, use a capture filter to only include traffic to/from that device's IP address. Typically in this format:

```python
host 1.2.3.4

```

Do not use ping. Just watch Ignition make several reconnect attempts. Then stop wireshark, save the file, and post it here.

It will very likely have TCP SYN packets from Ignition, with retransmits, with no responses from that device. Show that to your IT group as proof it is their problem, not yours.

---

<div class="post-metadata">

**Author:** ![D\_Mitri\_Tompkins](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@D\_Mitri\_Tompkins](https://forum.inductiveautomation.com/u/D_Mitri_Tompkins)\
**Post date:** [August 14, 2024, 9:04pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/7 "2024-08-14T21:04:12Z")

</div>

Not sure why but after saving it it seems to vanish from my documents for selection, but it is still there if I go to save another capture.

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 14, 2024, 9:11pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/8 "2024-08-14T21:11:19Z")

</div>

> [@D\_Mitri\_Tompkins](#):
>
> vanish

?

No idea. Overly-aggressive anti-virus?

---

<div class="post-metadata">

**Author:** ![D\_Mitri\_Tompkins](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@D\_Mitri\_Tompkins](https://forum.inductiveautomation.com/u/D_Mitri_Tompkins)\
**Post date:** [August 15, 2024, 3:10pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/9 "2024-08-15T15:10:12Z")

</div>

Yeah I'm not really sure what's going on with that, however I think the wireshark may not be necessary as I can't even ping to that IP address, so maybe it is a physical issue at the point of connection?

---

<div class="post-metadata">

**Author:** ![D\_Mitri\_Tompkins](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@D\_Mitri\_Tompkins](https://forum.inductiveautomation.com/u/D_Mitri_Tompkins)\
**Post date:** [August 15, 2024, 3:20pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/10 "2024-08-15T15:20:04Z")

</div>

Is there something I could just screenshot of the capture while it is still in wireshark?

---

<div class="post-metadata">

**Author:** ![D\_Mitri\_Tompkins](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@D\_Mitri\_Tompkins](https://forum.inductiveautomation.com/u/D_Mitri_Tompkins)\
**Post date:** [August 15, 2024, 4:06pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/11 "2024-08-15T16:06:11Z")

</div>

[attempt4atcapture.pcapng](https://forum.inductiveautomation.com/uploads/short-url/hJaxJKOXBu7RKAeB1IY8vFwfGZq.pcapng) (2.6 KB)

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 15, 2024, 4:21pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/12 "2024-08-15T16:21:57Z")

</div>

Yeah, no connection whatsoever.

Also, your gateway thinks it is on the same subnet with 10.13.130.122. If that isn't true, then IT has screwed up your server's routing table and/or VLANs.

---

<div class="post-metadata">

**Author:** ![D\_Mitri\_Tompkins](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@D\_Mitri\_Tompkins](https://forum.inductiveautomation.com/u/D_Mitri_Tompkins)\
**Post date:** [August 15, 2024, 4:25pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/13 "2024-08-15T16:25:33Z")

</div>

To my knowledge it is actually on the same subnet so I think that's fine, I'll need to investigate the plc physically and see what's going on I suppose. But just to confirm there are no signs of an IP conflict, just total lack of connectivity?

---

<div class="post-metadata">

**Author:** ![pturmel](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/pturmel/32/3295_2.png) [@pturmel](https://forum.inductiveautomation.com/u/pturmel)\
**Post date:** [August 15, 2024, 4:26pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/14 "2024-08-15T16:26:24Z")

</div>

Yes.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [August 15, 2024, 4:31pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/15 "2024-08-15T16:31:53Z")

</div>

Was Wireshark installed and this capture made on the same computer running the Ignition Gateway?

---

<div class="post-metadata">

**Author:** ![D\_Mitri\_Tompkins](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@D\_Mitri\_Tompkins](https://forum.inductiveautomation.com/u/D_Mitri_Tompkins)\
**Post date:** [August 15, 2024, 4:34pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/16 "2024-08-15T16:34:35Z")

</div>

Was my understanding it runs through web browser? If you mean did I have the gateway open at the time then yes.

---

<div class="post-metadata">

**Author:** ![Kevin.Herron](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/kevin.herron/32/7259_2.png) [@Kevin.Herron](https://forum.inductiveautomation.com/u/Kevin.Herron)\
**Post date:** [August 15, 2024, 4:37pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/17 "2024-08-15T16:37:13Z")

</div>

No, that's not what I'm talking about.

The Ignition Gateway, the actual application, is installed on a computer or server somewhere. If you didn't install Wireshark on, and run the capture from that server, then it's not a useful capture.

---

<div class="post-metadata">

**Author:** ![D\_Mitri\_Tompkins](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@D\_Mitri\_Tompkins](https://forum.inductiveautomation.com/u/D_Mitri_Tompkins)\
**Post date:** [August 15, 2024, 4:39pm UTC](https://forum.inductiveautomation.com/t/single-device-undergoing-reconnect-wait-loop-it-claims-no-firewall-or-ip-issues/94605/18 "2024-08-15T16:39:03Z")

</div>

In that case it is not at all a useful capture, the gateway proper is installed on a server I don't have access to. However, based off an inability to even ping or access the IP in browser I think my problem is a physical connectivity one, that or IT needs to figure it out themselves haha.
