If their ONT uses a GPON SFP module then there's probably a reasonable chance because you can just move that to a NIC. If not you have to try and get a module that's compatible and at that point you're off the map! Steve

Satisfying when you find and fix it and everything just starts working though. Steve

In 2.6 the ix driver reports a number of additional error types in the received errors counter. Check the sysctl mactstats for more detailed breakdown. sysctl dev.ix.0.mac_stats Steve

The pfSense docs is the place to start. You can also check out our back catalogue of video hangouts here: https://www.youtube.com/c/netgateofficial Steve

Leaving the password empty in the wizard does not change the password. It leaves the current password in place. Your existing username and password would not have been changed by the wizard if that were the case.

@johnpoz You've modded a special pfSense theme ?

@gertjan thank you guys... much appreciated - away at work so need to test over weekend, will report back!

If you want the changes to be present for everyone, you can edit them into /etc/skel/dot.<blah> where <blah> is profile, shrc, or tcshrc.

@gimpymoo I have a custom built appliance, specs as below: Intel G5400 4GB RAM SSD Intel Dual GB NIC If these are still your system specs, simply swapping the Intel Dual GB NIC for something like this will do it. Unless you've got extra card slots, then just add one for some extra ports. https://www.newegg.com/p/pl?d=intel+x540+dual+port+10gbe+nic Just watch out for counterfeit cards...

@stephenw10 Sure I can grab it and put on a test box but it will take a day or so. I will post back here as soon as I have an answer.

No problem. If you're able to test it I'm sure others would find that useful.

@stephenw10 said in Router setup for weirdos like me: @fireix said in Router setup for weirdos like me: Ok, so you mean that it is the best solution? That's what I would choose over anything else if it's available. You absolutely can configure pfSense as a transparent firewall if you need to it just requires some care. There is no 'transparent mode' button. It's easy to lock yourself out if the firewall if you don't have a separate management interface. Steve Having a seperate IPMI-network comes in handy in those situations :) For not-that-technical users, I would think it would be a very welcoming thing to have an easy method to enable transparent fw. But having tons of public webservers maybe not the exact average users do. Thanks for your help and advice :)

You can do that in the gui cert manager now too. [image: 1650831424314-screenshot-from-2022-04-24-21-15-37.png] Steve

Many thanks @stephenw10 for replying to my query. Sorry for replying earlier. I coudn't get back due to a mishap in family. The issue was finally resolved. I was due to fault in the ONT provided by the ISP. The bridge mode was not working properly. After follow up with ISP, they replaced the ONT and it worked. Thanks again for you time.

@marzdor said in Not getting same speed as isp router: I unplugged the cable from the WAN and put it in the OPT port and it showed up as 1000 Mmm, that in combination with the fact both ports are configured the same starts to look like a problem with the port.

Open a ticket we might have to reset your NDI manually if your install is not pulling the cert correctly. https://www.netgate.com/tac-support-request Steve

@jknott I think the Netgate 1537 does 10 gig RJ45 WAN & LAN. I can going to call there sales dept Monday to see if that would be a soultion.

Traditionally things were put in /conf for that because, many years ago, it was shared between boot slices. That doesn't apply any more but custom files are often put there. I would expect /root to be fine though, I've had custom things there for years. Steve

@stephenw10 Thanks that helped. Once I enabled UPnP it worked.

Thanks for the suggestion. I'm not sure how often pfsense scans for the ip address for the WAN, but 8/10 times it will finally get a legit ip address, sometimes taking several minutes to register when I power down/up my modem.