@shjfliejfasel Have your added rules to allow it?

@johnpoz Well, pfsense allows you to put multiple prefixes, including ULA on an interface and router advertisements allow for multiple routers. I would expect those to be within the same prefix, but I don't know that's required.

@cre8toruk : if you a have a Windows PC somewhere on your pfSense LAN network, check out :https://github.com/KoenZomers/pfSenseBackup Just set up a daily task that downloads the complete config.xml. You could retain the last 30 or 60 files (= 2 months) When you need to use your spare pfSense box, fire it up, import the latests backup, and your ok. No USB drive needed. Normally, no more need to think about it. Just, ones in a while, check if the daily backup is made. I'm using this backup tool for years now, and have always the latest 60 days / config.xml locally available.

@stephenw10 Thank you for the help, I guess this is due to some older version of snort package which is causing problem.

@viragomann said in SSH: Got it. thank Thank both Griffo and viragomann so much! george

@stephenw10 thanks so much for your feedback and information. i would stick with ufs from now on, due to my basic setup not needing much

@johnpoz thanks so much!

Nice catch. Thanks for digging.

He never mentions local console login - but sure that is more likely the problem than anything at all to do with pfsense.. Pfsense has no skin in this game at all.. In his first post he does mention local logins.. But this clearly states rdp from his laptop on the same lan When testing I use a Windows laptop to connect with RDP to the server in the same vlan No matter his problem - pfsense is not in this fight.. His fight is with his duo configuration and possible rdp client issues.

As an update - thanks to everybody for the answers. Now I am reading on VLANs - useful knowledge for future tinkering. The culprit turned out to be IKEA Trader hub. I replaced it with Philips Hue hub and it works as it should. IKEA hub was also flawless for a couple of years, just decided to go crazy lately. So problem solved, for now.

Not sure why, but it works now lol.

@stewart That's something you should be able to do with any managed switch.

@michaelcropper You do realize that what you do has no effiect on your performance, so long as your network is capable of handling what you get from the Internet. For example, my home network is capable of 1 Gb, but I only get 500 Mb from my ISP.

@stephenw10 thanks for your help.

@morbo Haha, smile, i had the same idea a few minutes ago and it works with our Office365 mailer! Thanks for your answer and have a nice day! Regards, Norbert

I've never generated data like that but I pretty always see 140Mbps when I run a test against, for example, fast.com. I've never seen it below 130Mbps. Steve

@it_ib You need the private CA key to sign the CSR see https://docs.netgate.com/pfsense/en/latest/certificates/certificate.html#sign-a-certificate-signing-request: Sign a Certificate Signing Request Signing a certificate signing request (CSR) is a special process which uses an internal CA on the firewall to sign a CSR and turn it into a full-fledged certificate. The following options are available when signing a CSR: CA to sign with The CA on the firewall which will sign this CSR. This must be an internal CA (private key present).