@Derelict: All in all what does it matter since the secondary is not passing any traffic? I see your point Derelict.  :) Thanks, -Martin

Gateway status is displayed on page status_gateways.php Offline gateways displayed red, and online gateways displayer green. How to know color from the command line?

I am guessing you have multiple IPs and your having a problem with the vip your forwarding.. I would allow for icmp on your vip, can you ping the vip when your website goes down?  You say you can get into pfsense when having the problem… My guess a different IP.. If so then do a sniff to you see traffic hitting pfsense for your IP and port your trying to forward?

Hi…i am a new user here. As per my knowledge a punch out tool only makes sense for dozens of devices to modify.Just drill a hole and use a regular, round 3-conductor cable for your serial port. All you need is Gnd, TX & RX anyway. 1m of regular microphone cable from your local music store will do and is durable and solid.

Here is the thing - unless your shut down pfsense for an extended period.. Your IP should stay the same going forward, since it will just renew its dhcp lease when it hits 50% of the lease time..  On my previous isp I had the same "dynamic" IP for YEARS and YEARS at a time… Only time it changed was when I changed out the device with a different mac... And when they redid their ip space in my area.

@macaruchi: …. My question is: it is normal behaviour? No. Not at all. What was the error ?

The best way would have been to have been using DNS the entire time and just changing the DNS records. Probably either a packet capture into a filter or changing the rules that pass traffic into that interface to enable logging and looking at the logs.

@heper: if you read the info below the field you will find this: Enter any additional options to add to the OpenVPN server configuration here, separated by semicolon. so add a ; at the end of each line Now… why didnt I see that? Thank you.

Yes either the resolver or forwarder depending on which one your using.  Just add a host override and point it to whatever your boxes rfc1918 address is.

Np glad you got it sorted, derelict is correct lots of variables can be involved in this - so it can be difficult to put together any sort of comprehensive guide that covers all the possible iterations.

Did you try the official documentation at https://doc.pfsense.org/index.php/L2TP/IPsec ? What version of Windows do you use? Is your client behind a NAT?

install the traffic total package.  Or install darkstat or bandwidthd If your just looking for total traffic summary is prob what your looking for.  Just select say monthly or daily and get totals, or you can even see hourly, etc.

Sorry for bringing this old post back again. I, too, trying to remove F1 prompt but I'm using GMirror and wanted to ask what's gonna be the device for me? This is what I have: [2.4.3-RELEASE][admin@pfs17]/root: df -h Filesystem                      Size    Used  Avail Capacity  Mounted on /dev/mirror/pfSenseMirrors1a    129G    960M    118G    1%    / devfs                          1.0K    1.0K      0B  100%    /dev /dev/md0                        3.4M    164K    3.0M    5%    /var/run devfs                          1.0K    1.0K      0B  100%    /var/dhcpd/dev procfs                          4.0K    4.0K      0B  100%    /proc fdisk -B pfSenseMirror doesn't look very right to me. There are two underlaying SSD drives working as ada0 and ada2 - how do I do it? -San

Yes, more information required!  :) Steve

@scotty562: I don't ever want to be short again :). I'm not really proposing a solution for your v4 problem, but, when you have some time, take a look what v6 /64 can do for you  ;D

Ok, thanks for your suggestion will give that a try.

@BLiNX: Currently the internet served by a standard router with some UAPs, which doesn't have good firewall. As long as the internet connection fast & stable, security is not really important here. Mainly for entertainment/streaming purpose only. @jahonix: … Stay away from those cheap switches with "108E" in its name (TP-Link, Netgear). I will avoid those SG105E & 108E, although they're support 802.1q. Just want to know why should I? They leak traffic from the native LAN to the VLAN.  My TP-Link access point does the same thing, which makes it useless for having multiple SSIDs and VLANs.

In case anyone else has this problem the workaround is to run mc -u https://forums.freebsd.org/threads/misc-mc-problem.55627/