Applied and confirmed working. :)

Without knowing the boot error it's impossible to say what it might have been.

As for that graph, that isn't a graph analyzing your traffic, only your log messages. If the only rules you have that log are block, or you didn't have any traffic that matched a pass rule with log set, then seeing 100% blocked on that graph is normal.

What are you expecting it to be booting from with its storage removed?

You probably want to make a memstick or CD-ROM and boot that and reinstall to whatever storage you intend to run it from now.

Apparently, this unit is toast. I shipped it back for an RMA.

Wait for 2.4, or depending on the cause, 2.4.1. If it's stable with hw.igb.num_queues="1" there is no harm in running that way for now, except perhaps with lower throughput depending on the load.

Whatever you install has to use "COM2" as the serial console. There are several examples here: https://www.netgate.com/docs/rcc-ve-4860/install-guide.html

@jahonix:

@jahonix:

Is that your main workstation … ?

Nope, I have separate PC as my main workstation, the thing that pisses me off is Windows 10 has constant update, so far I just set it on manual update but I don't know if MS will force and update if I keep ignoring that. Probably stupid question, but is there any way for VM inside Hyper-V to survive a windows update?

Are you sure you have not installed SquidGuard because sgerror.php as shown in screenshot is by SquidGuard.

Ashima

thanks finally solved it. Just increased cpu and ram

@kpa:

As far as I know it's a cosmetic bug in Unbound caused by chrooting it under /var/unbound. There is no real problem.

Good to know!  Thank you!

Are those other routers all pfSense installs?

There is also no reason to connect that to the firewall in any way. It is a network printer. Devices on your network will contact it directly over the network, it is its own print server.

Alright, thanks!  Guess my wanting to read the directions first messed me up.  :D

Thanks for the info.

@pglover19:

@johnpoz:

Especially since it seems your DMZ is all just VMs?  So how do you have that connected to your vm host?  Assume it has its own nics for the physical connection to the dmz switch.. So your using how many ports on this switch?  Seems overkill for a few ports, etc.

I have decided not to use the extra Juniper EX3300 as my DMZ switch. Will save it for my home lab setup in the future. I found a Juniper EX2300-C switch on EBay last night at an incredible price. The price was so good I purchased 3 of the switches. The unit is fabless, 12 ports and all ports are POE. Will use 1 as my DMZ switch.

Attached is a drawing using the EX2300-C switch as my DMZ switch as well as using one of the EX2300 as a POE+ switch connected to my internal LAN network. The EX2300-C has 12 POE+ ports. Please let me know if you agree with how I have the EX2300-C connected to the EX3300 switches. I am trying to avoid any hairpins.

Drawing7.jpg_thumb
Drawing7.jpg

@digity:

To split up the network I set up a VLAN (ID 20) and assigned interface OPT1 to it. Devices successfully get an IP address from pfSense, but oddly don't get Internet access. Even more odd is I can't even ping the firewall (192.168.20.1), but CAN ping devices from the firewall (via console and webUI). The VLAN and OPT1 interafce were generadted via the "Assign Interfaces" option on the console.

Any idea how to get devices on OPT1 to successfully get Internet access?

P.S. - On the other interface (LAN), devices get Internet access with no problem.

SOLVED! I didn't have the correct rule set up for OPT1 interface (Firewall -> Rules -> OPT1). I erroneously selected "LAN net" as my source in the allow rule (for IPv4). It should be "OPT1 net" (or maybe "any" would work too). Once I changed it to "OPT1 net" devices were able to ping the firewall/pfSense box and get on the Internet.

Hope this helps someone else.

Yeah, lack of sleep and caffeine don't make for a cognizant mind.
So it may be bad memory? I'm still trying to figure out why its in readonly mode, and whoever set this up put permission on file transfers so i can't get access to the backup. The bios diag came back all clear on the memory/ram.  Look like a complete reinstall is in order.
Now if I'm doing a full reinstall on a new HD (got a sandisk SSD) I should be able to pull the config file from the old HD through the pfSense installer right?

Hi dude,
i`m on same problem. I cant figure out till now.

Have you ever been able to solve this problem?

If they are routing the main block via the transit block, you should be able to just add virtual IPs from the second block. You might want to consider obfuscating the first octet or two of your IPs.