Categories

  • Discussions about TNSR

    376 Topics
    1k Posts
    fractal_boyF
    @dgeist there is a bug on TNSR that prevents to learn neighbor mac while you have map enabled on the interface. The workaround is to configure static neighbor entry.

  • Discussions about pfSense Software, click a category below

    122k Topics
    783k Posts
    MarinSNBM
    @luckman212 For me for some reason, this has never worked under the System Tunables on several pfSense boxes I have owned including a few Netgate ones. It only works under the File Editor as explained in the link you included after creating the following file in the boot folder: /boot/loader.conf.local and entering the line you mentioned to turn off flow control (for SFP+ interfaces): hw.ix.flow_control=0 After saving and a reboot, all the tx/rx pauses are gone. I have also added another line there (see below) - I don't remember where I got this but it was a long time ago and at a time when I was trying to improve the compatibility of the SFP transducer I was using at that time with a Netgate 6100. Not sure if this makes a difference anymore and/or if people still use it. hw.ix.unsupported_sfp=1

  • Discussions about pfSense software packages

    21k Topics
    130k Posts
    T
    Looked around a bit more and came across this issue on Redmine: https://redmine.pfsense.org/issues/16932 Could this be the fix that led to the 3.2.16_1 release? Thanks again.

  • Discuss pfSense in other languages

    43k Topics
    268k Posts
    W
    Also ich hatte immer die Einstellung für die Nutzung von einem MR401: [image: 1784130996540-043d3b8e-82fb-4dee-b550-570c084d0c64-grafik.png] [image: 1784131037879-dee2204c-2f12-47b4-aa7a-7f2c12ae237c-grafik.png] Das Downstream-Interface anwählen Jetzt habe ich Magenta TV 2.0 und damit hat sich das alles erledigt, auch besonders der igmproxy.

  • Information about hardware available from Netgate

    3k Topics
    21k Posts
    SteveITSS
    @Zak-0 FWIW, ways to reduce disk writes: https://forum.netgate.com/topic/195879/netgate-2100-life-expectancy/8

  • Information about hardware available from Netgate

    44 Topics
    211 Posts
    AriKellyA
    It looks like unified web management could be coming soon. It would be great if it means easier control and management of all web services in one place. Let's see if any companies announce more details about it!

  • Feel free to talk about anything and everything here

    4k Topics
    19k Posts
    F
    Hi We installed a new pfsense with 2.8.1 at a remote site and tried to establish an IPsec tunnel (P1) from another site which ran on 2.7.2 We were not able to establish the connection, always got error message like the ones below. We have had a IPsec connection working between 2 sites running on 2.7.2 After a while of trying out and checking we decided to upgrade one of the machines to 2.8.1 Result: Now the formerly working IPsec connection can't be established showing the same errors. So my best guess is that there is a change of behaviour with 2.8.2. Unfortunately there is no easy way to rollback the machine and we have to get that going again. It doesn't seem to make much sense to upgrade the machine still running on 2.7.2 since nothing works on 2.8.1 If someone has an idea any help is very much appreciated! Thx Jul 17 17:33:59 charon 47965 10[NET] <82> received packet: from 83.xx.xxx.xx[61884] to 192.168.1.122[500] (720 bytes) Jul 17 17:33:59 charon 47965 10[ENC] <82> parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ] Jul 17 17:33:59 charon 47965 10[CFG] <82> looking for an IKEv2 config for 192.168.1.122...83.xx.xxx.xx Jul 17 17:33:59 charon 47965 10[CFG] <82> candidate: 192.168.1.122...83.xx.xxx.xx, prio 3100 Jul 17 17:33:59 charon 47965 10[CFG] <82> found matching ike config: 192.168.1.122...83.xx.xxx.xx with prio 3100 Jul 17 17:33:59 charon 47965 10[IKE] <82> local endpoint changed from 0.0.0.0[500] to 192.168.1.122[500] Jul 17 17:33:59 charon 47965 10[IKE] <82> remote endpoint changed from 0.0.0.0 to 83.xx.xxx.xx[61884] Jul 17 17:33:59 charon 47965 10[IKE] <82> 83.xx.xxx.xx is initiating an IKE_SA Jul 17 17:33:59 charon 47965 10[IKE] <82> IKE_SA (unnamed)[82] state change: CREATED => CONNECTING Jul 17 17:33:59 charon 47965 10[CFG] <82> selecting proposal: Jul 17 17:33:59 charon 47965 10[CFG] <82> proposal matches Jul 17 17:33:59 charon 47965 10[CFG] <82> received proposals: IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_4096 Jul 17 17:33:59 charon 47965 10[CFG] <82> configured proposals: IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_4096 Jul 17 17:33:59 charon 47965 10[CFG] <82> selected proposal: IKE:AES_CBC_256/HMAC_SHA2_256_128/PRF_HMAC_SHA2_256/MODP_4096 Jul 17 17:33:59 charon 47965 10[CFG] <82> received supported signature hash algorithms: sha256 sha384 sha512 identity Jul 17 17:33:59 charon 47965 10[IKE] <82> local host is behind NAT, sending keep alives Jul 17 17:33:59 charon 47965 10[IKE] <82> remote host is behind NAT Jul 17 17:33:59 charon 47965 10[CFG] <82> sending supported signature hash algorithms: sha256 sha384 sha512 identity Jul 17 17:33:59 charon 47965 10[ENC] <82> generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(CHDLESS_SUP) N(MULT_AUTH) ] Jul 17 17:33:59 charon 47965 10[NET] <82> sending packet: from 192.168.1.122[500] to 83.xx.xxx.xx[61884] (728 bytes) Jul 17 17:33:59 charon 47965 10[NET] <82> received packet: from 83.xx.xxx.xx[4500] to 192.168.1.122[4500] (272 bytes) Jul 17 17:33:59 charon 47965 10[ENC] <82> parsed IKE_AUTH request 1 [ IDi AUTH N(ESP_TFC_PAD_N) SA TSi TSr N(MULT_AUTH) N(EAP_ONLY) N(MSG_ID_SYN_SUP) ] Jul 17 17:33:59 charon 47965 10[IKE] <82> local endpoint changed from 192.168.1.122[500] to 192.168.1.122[4500] Jul 17 17:33:59 charon 47965 10[IKE] <82> remote endpoint changed from 83.xx.xxx.xx[61884] to 83.xx.xxx.xx[4500] Jul 17 17:33:59 charon 47965 10[CFG] <82> looking for peer configs matching 192.168.1.122[%any]...83.xx.xxx.xx[192.168.200.103] Jul 17 17:33:59 charon 47965 10[CFG] <82> no matching peer config found Jul 17 17:33:59 charon 47965 10[IKE] <82> received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding Jul 17 17:33:59 charon 47965 10[ENC] <82> generating IKE_AUTH response 1 [ N(AUTH_FAILED) ] Jul 17 17:33:59 charon 47965 10[NET] <82> sending packet: from 192.168.1.122[4500] to 83.xx.xxx.xx[4500] (80 bytes) Jul 17 17:33:59 charon 47965 10[IKE] <82> IKE_SA (unnamed)[82] state change: CONNECTING => DESTROYING
Copyright 2026 Rubicon Communications LLC (Netgate). All rights reserved.