Hello there. I had the same problem, accessing my router behind PfSense. Internal lan is 192.168.0.x Pfsense on 192.168.0.254 Router is 192.168.1.254 There was no way to access it. Then i checked my network card IPs. I had 2 assigned. 192.168.0.22 and 192.168.1.22 Removed 192.168.1.22 amd then BANG! router interface is reachable. Is really THAT simple as other people wrote. NO need to mess up anything. Hope this helps someone. Have a nice day, Mario

Should be similar to https://forum.netgate.com/topic/144492/best-practice-moving-xg-7100-config-to-sg-5100 -Rico

John, I tryed it. I did create an USB having a conf directory and containing two files (to be sure) config.xml config-pfSense.lan-20200615125949.xml Whats ever it was not recognised / not used Perhaps because the usb had been used as gpt device before. What-ever. It did not work So I did it the complicated way (using a very long UTP-cable) Louis

@noplan alles klar. Dann fuchs ich mich mal durch die ganzen Einstellungen durch :) Bis jetzt gefällt es mir super! Danke für deine Unterstützung.

bla bla bla are you really trying to bully me? eh sadly I don't have time for this shit, I'd rather help than stay here to argue

i think i figure it out. i mean i just understand what was the other user "Derelict" trying to explain. thanks "Derelict"

@bmeeks said in kernel: em1: Watchdog timeout -- resetting: Hmm... I would not say everything is working. Those errors point to something being really not right. If it just started up out of the blue, my first suspicion would be hardware. Could even be something as simple as the card needs reseating into the slot to make sure it has a good connection with the bus. There were issues with hardware watchdog timeouts with the generic FreeBSD drivers for Realtek NICs, and in that case compiling and using the Realtek-supplied native drivers corrected the problem. However, Intel NICs have historically been very well behaved in FreeBSD using the kernel drivers. Just asking, but are you 100% positive beyond a shadow of a doubt that you have genuine Intel NIC hardware? There are some cheap Chinese knockoffs of popular Intel NICs out there for sale. If you got a "steal of a deal" on the NIC, I would be suspicious. Hi B. Yeah. 100% sure. Bought them off Intel themselves :) I went to the Interface page and chose autoselect instaed of default and the errors were gone immediately. Weird.

Thanks for the clarification on a few things. It's helped me get my mind round everything better and giving me a clearer idea of what direction I need to go to get everything as I want.

OK. I found it. Under System/Advanced/Admin Access. [I am unable to delete my post. Sorry for the noise.]

Send the logs to a syslog server. Once they're off the FW you're only limited by disk space on the syslog server.

https://www.netgate.com/resources/videos/bandwidth-monitoring-on-pfsense.html -Rico

@Cool_Corona for me this cannot be a case of debate these are unreasonable things at SOHO surely there is also a nuclear power plant in the garage to serve this muscular firewall + router unit you can’t hunt sparrows with a cannon, but it’s your decision I look at these things with a professional eye and you only experiment with pfSense it has been my job for a long time and I think you're dealing with it as a hobby this is not a problem anyway, but like I said - we are different

Bug ? Setup ! pfSense handles ICMP as per user settings. If not, this forum would be swamped by angry user posts ^^

@johnpoz Sorry mod, you are right and I have edited my post. I'm not using it forever, I have just installed it to test it on Unraid but I will use pfsense following spaceinvader tutorial for Unraid. Thanks anyway for your help.

Generally speaking in a site-to-site scenario the OpenVPN network (tunnel network) doesn't really matter to the clients on both sites, it's transparent for them. It's used by OpenVPN internally and routes the traffic to your real networks on both sites. There is a LOT really good official documentation around for VPNs: https://www.netgate.com/resources/videos/site-to-site-vpns-on-pfsense.html https://www.netgate.com/resources/videos/advanced-openvpn-on-pfsense-24.html https://docs.netgate.com/pfsense/en/latest/book/openvpn/site-to-site-example-configuration-shared-key.html https://docs.netgate.com/pfsense/en/latest/book/openvpn/site-to-site-example-configuration-ssl-tls.html -Rico

Additional info, system logs show several: kernel vm_thread_new: kstack allocation failed And several kernel sonewconn: pcb 0xc7274790: Listen queue overflow: 193 already in queue awaiting acceptance (1 occurrences) nginx 2020/06/12 12:39:47 [error] 937#100185: *5059 connect() to unix:/var/run/php-fpm.socket failed (61: Connection refused) while connecting to upstream, client: xx.xx.xx.xx, server: , request: "GET / HTTP/1.1", upstream: "fastcgi://unix:/var/run/php-fpm.socket:", host: "xx.xx.xx.xx:xxxx"