@stsc_srzc_de Try the "RFC 2136 Clients". Also you could disable ULA in Fritzbox.

Yes, I would expect them to have been removed when the packages were uninstalled. If you restored a config later it might have had those crontab entries but been unable to install the package for some reason. That would result in what you saw. Steve

@stephenw10 You sir are a gentleman and a scholar, I have nothing but my thanks for you. Cheers!

@stephenw10 Yes

@stephenw10 Well, I don't know what it could be. Thank you for your help.

Hmm, odd. I'm not aware of any issues that present like that. Glad you were able to resolve it anyway.

@stephenw10 said in Confused about rule: The rule number to rule description is created when the logs are viewed and that can change. Yeah I was thinking the same thing at first - but then he showed his actual rules and the IDs were the same - very strange.

@stephenw10 Excellent! When the system was first set up I asked tech support to name them according to the VPN's server name, not realizing the provider occasionally changes their names

Guys, don't get me wrong, there are hundred of ways to ensure you have a "backup line", this doesn't mean we shouldn't have "revert back in case of failure logic" How I ended up in this situation, I have changed "default domain" (entered two domains in the field) of the OpenVPN and I really haven't expected that, this is not supported and I also thought that, if it isn't supported the OpenVPN will simply return an warning, and ignore the value. There is nothing related to pfSense in that case, it is up to the vendors of OpenVPN to clarify this as a critical or non-critical issue on the configuration and decide how to handle it - to continue, or to fail. Anyway, I'm not here to blame pfSense developers, but opposite - to give them an idea to think of. Meanwhile I remembered how the iXsystem guys do it - when you change network settings, you do your changes, then hit apply, because you are ready to test, then a simple timer is activated. If you don't save/confirm your changes in timely manner, they will be reverted back. (the same as Juniper, commit/confirm)

Yes, it could have failed to return an IP if both VPN gateways went down. Which is correct.

@stephenw10 Stephen, thank you for clarification - now I understand why there is no pfSense in Google marketplace and what is involved if I will decide using it on GCP platform. Have a good weekend. Piotr

The rrd graphs are averaged over quite a long period at the 3 month view. They are almost certainly peaking at much higher than 50Mbps. If you look at shorted spans you will find higher peaks. Steve

Mmm, my limited scripting skills are failing me but you can set the status LED on the 1100 to 9 flashing speeds. Like: [22.05-RC][root@1100.stevew.lan]/root: echo f1 > /dev/led/ok [22.05-RC][root@1100.stevew.lan]/root: echo f5 > /dev/led/ok [22.05-RC][root@1100.stevew.lan]/root: echo f9 > /dev/led/ok So it would not be that hard to update that to reflect the load average using a script. Steve

@stephenw10 yes mikrotik switches are very complex and difficult I did the vlans on edge switch and ubiqiti and went good . this mikrotik switchess made lost me

@stephenw10 Nice to find out it wasn't just me going bonkers. Thanks for the help, triage and bug report.

Ok, looking at that it appears the installed and running kernel is correct but the userland is still at 12.2. pkg upgrade didn't offer you any updates? Try running pkg info -x pfSense and see if anything there still shows 22.01. I would not expect a ZFS mirror to be capable of booting a different kernel. I've only ever seen it on separate boot devices. Steve

@stephenw10, I disabled UPnP on the router and I still have access to the server. @SteveITS, Thanks for the information about the Domain Overrides. I entered the server's domain and IP address into the table, changed the client's adapter setting to automatically obtain the DNS address and restarted the client. The client was able to access the server files and the Internet - problem solved! Thanks to all for sticking with my situation until it got resolved.

Bridging and VLANs can be.... interesting! But what you're doing isn't that complex you should be able to create a bridge with the two VLAN 36 interfaces in it. Steve

@stephenw10 22.01 on pfsense and 0.15.7_33 for freeadius