During install, there's a "Rescue config.xml" option, IIRC.

Got the logs. No idea how the consultant reached his conclusion as the system.log has no entries until a couple of hours after the outage started. In fact, none of the logs with entries during the timeframe around the outage show anything vaguely helpful except for documenting the precise time when things began going south; the timing-out of OpenvPN connections, the retry attempts for IPsec. Anyone know what a duplicate IP address looks like in the logs?

No.

Use a BSD system. Install pfSense to the other disk, then mount that old disk on the new pfSense install.

I'm a little confused about what you are doing. If you want to connect machines in site 2 to some of the machines in site 1, just make the phase 2 match 192.168.100.32/29. Don't know why you are changing gateways, etc. Anything on site 1's LAN is going to be directly connected, messing with your subnet masks is not the way of it. If you want to restrict traffic between machines on the LAN, put them on different interfaces/subnets.

Those are logs from the pfSense GUI, not from squid.

It's dead simple. There isn't much to debug or much to go wrong. Most of the time any error is from an incorrect password.

Yeah I have read that DNSSec might cause the issue, but I can't boot the system. So how should I disable DNSSec?

Install syslog-ng on pfSense (or another box), point pfSense there, disable local logging and rotate as needed. The circular logs do not support any such thing, oldest entries go when there's no more space for the new ones.

Sorry, think I got it now.

@wcrowder: for clarity of image there is a huge difference between 3Mps and 6Mps. Absolutely. That's why I asked what you want to see. The resort looks nice.

Thanks for the clarification John.  Yeah if using the PVID to direct native (untagged) traffic to a VLAN it could be though of as either a native LAN or VLAN depending on the context.  Such as troubleshooting, etc.

I am just curious on if any of you have used the 10Gb sfp+ on a PFS box? For sure it might be going well but it is mostly more a problem what the most peoples will thinking what they must be getting out of that connections! In usual you will be getting out under real life conditions 2 GBit/s - 4 GBit/s real throughput from a 10 GBit/s uplink. Have you used it on a 10gb circuit? 10 GbE uplink to the DMZ switch and to the LAN switch. Were you able to take full advantage of the circuit? From the pfSense to the DMZ switch (Layer2+) and from the pfSense to the LAN switch (Layer3) it will be all will be running more smooth and liquid. What type of hardware did you use for the PFS Box? Intel Xeon E3 >3.0GHz Single Intel Xeon E5 >3.0GHz Dual Intel Xeon E5 >3.0GHz Intel single or dual Port SFP+ adapters HotLava (Intel based) multiport NICs Supermicro Boards & one Gigabyte board.

The Supermicro A2SAV-L board might be nice looking, but in the right case from Supermicro sold as a barebone it is available for ~$779 and then I would more have a look to the SG-4860 unit from the pfSense store for $699 plus a 64 GB mSATA!

Hi. Maybe help you https://doc.pfsense.org/index.php/VoIP_Configuration https://forum.pfsense.org/index.php?topic=108318.0 Regards.

@johnpoz: Yeah PPPOE not going to show you any sort of speed. Actually as I understand ppp speed can be limited and shown according to freebsd documentation for modems, but there is nothing that can be used as speed value for linked ethernet-virtual interfaces, may be only linked physical interface speed. Anyway this is just cosmetics and nothing else.

Or if you want to block youtube for everyone completely  go to opendns create a account block streaming categories chats then go to pfsense and change the dns server to point to open dns.  Regards friend