Good news.. Thank you for the response. Netgate always comes through. Regards

@stephenw10 Yes, there was another gateway to another "internal" network. Everything there was virtualized, however I can see why that would cause a problem.

Hmm, well ntpd won't respond if it thinks it is not sync'd itself, which looks like the case here. What if you try to manually sync the Secondary from the command line? Against the Primary maybe? Or some external time source? Steve

@soupdiver wouldn't it be easier to just put all the IP's of AWS EAST in an alias & policy route it through the openvpn ? yea it seems so I had to lookup policy routing but this works nicely. I will write a lil script which formats the AWS API response in a way pfSense will understand it and then I should be done. Thanks!

Thanks, for the information, and all your help,

You are sending data to different graylog servers? Are you recombining it again somewhere to analyze it? Because there is too much data for one server to consume? Redundancy? I'm not sure there is any way to do this but we might be able to suggest something else. Steve

@stephenw10 Thank you very much for the hints. I'll take a look!

So pretty much "You don't" then.

@johnpoz Got it, thanks :)

As I mentioned on your ticket with us that will only work if the provider is routing the static IPs, or the full subnet, to you dynamic PPPoE address. Zen may do that but that last time I dealt with a BT Business connection they did not. It's easy to test though. Just send some traffic to one of your static IPs from some external source and run a packet capture on the PPPoE and/or it's parent to see if it arrives. You can then use VIPs as described there. For inbound/outbound NAT you can just use the IPs directly in rules. For services on the firewall, like OpenVPN, you need a VIP. https://forum.netgate.com/topic/80509/bt-infinity-with-block-of-5-static-ip-addresses-fibre-modem-pppoe-wan-dynamic Steve

@piba @stephenw10 Ok you convinced me. Updated the subnet. [image: 1610483957327-490d19f1-cfe7-49a4-87c7-0318f65f13ba-image.png] I'm still unsure if its related to the Virtual IP or not (I don't believe it is) but I have been running into a issue when I try to join a second K8S control-plane node to the cluster. It runs through its join process and then seems to lose a connection and ends up killing the cluster. You can see a post I made about it here on ServerFault if you want. Assuming the issue is not VIP related, then I would say this Netgate forum thread is closed. Thank you everyone again for your help in this matter!

@chpalmer that could be it (let it stay for a night and it started working) when I replaced my tplink with UDM it worked instantly (3 months ago or so) but you might be right next time I will just reboot the modem, see if it help (its in my garage) thanks

@tsgebch1 said in PtPd2 Support: we like to have ptpd2 on the SW... No problem, but I'll tell you "you cut the ax into a big tree"

If I wasn't serving up stuff to friends an family - 50 would be fine.. And even then - it works..Would just be nicer to have more..

If you use tcpdump from the command line you can just use re0 directly. But you can also assign and enable re0 in the webgui, but leave the IP type as none, and it will be available in the pcap menu. Steve

Yes exactly if you are trying to connect to a sercice on the Ubuntu server you would use localhost there, or some IP on the Ubuntu box listening on that port. Not the pfSense IP. Steve

Yes, 2.0.3 is totally obsolete at this point. There is no good reason to be running that. https://docs.netgate.com/pfsense/en/latest/releases/versions.html Steve

I agree with you. Many thanks for taking your time and helping me in a very professional way!!!