I know this is an old thread but if you still want info try this.. https://forum.netgate.com/topic/186169/netgate-2100-customization-of-leds-guide/

Ok if you can send me your key and ndi in chat I can check if the server sees it. I won't be able actually see the config without the pass phrase.

Yes and you can set it to import only the aliases in the import utility so you don't mess up your config. Use "Restore Area" [image: 1721240177107-screenshot-2024-07-17-at-11.15.07.png]

Incorrectly NATing the VPN traffic could definitely be an issue.

@stephenw10 thanks, that worked!

Check the BIOS/Coreboot version. It's probably waaay out of date and that's about the only thing you can do.

@stephenw10 the duplicate echo, is with the stable configuration. current. what works. I believe is an ISP issue. When i had the wan gateway on the rules. never actually saw duplicate reply, but again things were unstable and just occasionally crashed.

This is resolved, had Netgate TAC register the device ID.

I would certainly expect to. I've never had any issues enabling RAM disks. Just make sure the size you set for /var is at least larger than it's currently using. There are some packages that won't work with RAM disks or at least not without significant tuning. Snort or Suricata primarily.

@Sealr0x If you have a complex setup...VLANs, etc., Netgate will convert your configuration to the new model for you (free ticket). One note though, when you reassign interfaces, click the bottom Save button before you click the Apply button at the top of the page. https://redmine.pfsense.org/issues/14591

Yet...

@stephenw10 gotcha. Thanks for taking the time out to explain. Much appreciated.

The txt file is copy/pasted from the logs page and it's still set to the default 500 entries which isn't enough. You can set that to display up to 2000 entries. If that's not enough you can see the full log in /var/log.

@henniee You don't need to worry if: 1- you are using EAP authentication (e.g. IPsec, 802.11x) which is not affected. 2- if the traffic never leaves the firewall (FreeRADIUS server on pfSense software, NAS/Client is on the same device) For the time being, you can set this in your radius.conf, but note that this may bring issues depending on your NAS devices freeradius implementation. require_message_authenticator = yes limit_proxy_state = yes Note current best practices dictate protecting RADIUS traffic by tunneling or limiting network access (e.g. using a private/secure link for RADIUS) which also limits potential exposure. You can get more details in the following links: https://www.freeradius.org/security/ https://www.inkbridgenetworks.com/blastradius/faq To report vulnerabilities, go to https://www.netgate.com/security This is not an official answer from Netgate or from freeradius, I'm just a regular user.

@Gblenn Thanks a lot for superb help :-)

Re: ISP router (Nokia G-140W-F) does not have bridge mode This router actually supports bridge mode. But ISP should make configuration change on own side to make it work. Under Network Lan menu you can switch one of four ports to bridge mode and under WAN menu delete Internet related VLAN configuration. After you have to set same Internet vlan on firewall interface.