It doesn't work Mutual PSK + Xauth for vpnc: http://forum.pfsense.org/index.php/topic,59385.msg319238.html#msg319238 Use ike-qtgui (Shrew Soft VPN Access Manager) package.

update: last couple of days it seems to be going ok. Did not update yet to 2.0.3 prerelease, also reverted back from all previous modifications. What seems to be working: in "System\Routing\GW_WAN" under 'Advanced' I increased the value 'Down' to 60 (default was 10). This action seem to have helped for the dyndns update, I haven't had the nasty 'curl' error anymore since modification. So either it actually helped, OR I have been lucky until' now. I still sometimes see the GW as Offline, so maybe I should double it. (maybe I need some better understanding of the apinger mechanism  :-[ ) As 2nd backup mod, I installed the cron package & modified the nightly scheduled DynDns check to run every 30 minutes. It does pollute the system log a bit, but good side effect is I can check how it is working, and so far it seems I haven't needed the cron mod yet. before I forget: Tnx Tim & Phil for the given suggestions! Really appreciated…

Nope. I also haven't got an iPhone :)

Hi, And did you added firewall allow rules for your dvr ports? And what is/are your dvr port(s) And if you want to connect default port (80) it might be conflict witrh your pfsense box port. You should change web access port on your dvr device. Regards, SGTR

Very good point! Hmm I will give it a try and see what happens. Sounds a lot more simple anyway.

@jimp: The backtrace seems to indicate a problem in memory or the hdd, hard to say for sure since it just mentioned that it crashed while operating in the swap space code. That's deeper down in FreeBSD than we touch, so it isn't likely to be an OS or pfSense issue, most likely hardware in some way. Thanks for the tip! Will do a hardware diag during off hours. Appreciate the super quick response! -M

I have the same issue but it seems people who are testing it don't happen to experience it.

PERFECT! In the System -> User Manager section, I clicked on edit admin account. In the "Authorized keys" section, clicked "Click to paste an authorized key." I had to re-type in my password, because I kept getting an error that the passwords didn't match.  Once I did that, it worked like a charm. Thanks again!

ok, got it working.  not sure what the deal was, i didnt change anything today. i plugged the cisco router into opt1, just as i did last week, and it worked w/o any issues.  i used the same straight through cable that i had left on site. anyway, just wanted to update the thread. thanks.

Well, it looks like "Have you tried turning it off and on again?" Has succeeded after a 2nd reboot.

Bump. Anyone? Is this in the right forum?

I investigated the STP option in the past when initially setting up a second FW with Carp but it was a disaster. I ended up having to get a second IP range and go fully routed. So is there any other way of me trying to achieve firewalling one IP range across two interfaces with Carp?

someone could make a simple package that includes the man pages and required commands, but we aren't going to put them in the base install, no matter what size CF image.

Hi Walla, The system did not respond to keyboard at all. I checked on the health status (temp/etc) and I could not find anything. We do have traffic shaping enabled and this would be right around the time that our off-site backup sync would normally occur. I disabled our off-site backups last night and the issue did not happen again this morning. Im begenning to think that it could be something to do with the volume of traffic hitting the traffic shaper and killing stuff.

You would definitely get better responses on a squid forum or centos forum.

locking this one since the problem is better defined in the linked CARP thread so this is just a duplicate.

2.1 can do pure NAT mode reflection which gets rid of netcat. That ticket probably just needs to be closed since the pure NAT mode should work fine in every case including UDP. The original mode is retained just in case someone prefers it.

Hmm. May have jumped the gun a little. The issue still seems to occur, albeit less frequently. It now seems quite intermittent in its timings. Any more advice? Tom.