Use a BSD system. Install pfSense to the other disk, then mount that old disk on the new pfSense install.

I'm a little confused about what you are doing. If you want to connect machines in site 2 to some of the machines in site 1, just make the phase 2 match 192.168.100.32/29. Don't know why you are changing gateways, etc. Anything on site 1's LAN is going to be directly connected, messing with your subnet masks is not the way of it. If you want to restrict traffic between machines on the LAN, put them on different interfaces/subnets.

Those are logs from the pfSense GUI, not from squid.

It's dead simple. There isn't much to debug or much to go wrong. Most of the time any error is from an incorrect password.

Yeah I have read that DNSSec might cause the issue, but I can't boot the system. So how should I disable DNSSec?

Install syslog-ng on pfSense (or another box), point pfSense there, disable local logging and rotate as needed. The circular logs do not support any such thing, oldest entries go when there's no more space for the new ones.

Sorry, think I got it now.

@wcrowder: for clarity of image there is a huge difference between 3Mps and 6Mps. Absolutely. That's why I asked what you want to see. The resort looks nice.

Thanks for the clarification John.  Yeah if using the PVID to direct native (untagged) traffic to a VLAN it could be though of as either a native LAN or VLAN depending on the context.  Such as troubleshooting, etc.

I am just curious on if any of you have used the 10Gb sfp+ on a PFS box? For sure it might be going well but it is mostly more a problem what the most peoples will thinking what they must be getting out of that connections! In usual you will be getting out under real life conditions 2 GBit/s - 4 GBit/s real throughput from a 10 GBit/s uplink. Have you used it on a 10gb circuit? 10 GbE uplink to the DMZ switch and to the LAN switch. Were you able to take full advantage of the circuit? From the pfSense to the DMZ switch (Layer2+) and from the pfSense to the LAN switch (Layer3) it will be all will be running more smooth and liquid. What type of hardware did you use for the PFS Box? Intel Xeon E3 >3.0GHz Single Intel Xeon E5 >3.0GHz Dual Intel Xeon E5 >3.0GHz Intel single or dual Port SFP+ adapters HotLava (Intel based) multiport NICs Supermicro Boards & one Gigabyte board.

The Supermicro A2SAV-L board might be nice looking, but in the right case from Supermicro sold as a barebone it is available for ~$779 and then I would more have a look to the SG-4860 unit from the pfSense store for $699 plus a 64 GB mSATA!

Hi. Maybe help you https://doc.pfsense.org/index.php/VoIP_Configuration https://forum.pfsense.org/index.php?topic=108318.0 Regards.

@johnpoz: Yeah PPPOE not going to show you any sort of speed. Actually as I understand ppp speed can be limited and shown according to freebsd documentation for modems, but there is nothing that can be used as speed value for linked ethernet-virtual interfaces, may be only linked physical interface speed. Anyway this is just cosmetics and nothing else.

Or if you want to block youtube for everyone completely  go to opendns create a account block streaming categories chats then go to pfsense and change the dns server to point to open dns.  Regards friend

@virgiliomi: @W4RH34D: Sounds awesome.  If they could only act as access points too! If you use Android-based devices, you can install the Sonos app on them and there's an advanced setting to allow Android devices to connect to the SonosNet mesh network as well. They'll only be devices on the network though, not full mesh nodes like the Sonos devices are. Don't expect super performance out of it though… streaming video while connected probably won't go too well. Right, it would be for business stuff.

which was why I was hoping to configure pfsense to route all netflix traffic to WAN instead of the VPN Sorry, your explanation was a little vague and I thought you were trying to avoid being blocked when using foreign Netflix instead of local.  You would normally use policy routing via firewall rules to determine which WAN your traffic goes out.  You could have a rule on LAN such that all traffic from your TV's IP address is routed out the WAN gateway.  How do you currently have your config so that everything is going out the VPN?

Well, kill the process. In System - Update - Update Settings, tick the Disable the automatic dashboard auto-update check checkbox and save. Stop browsing the package manager if your computer cannot handle it. There is already a bug open about the nonsensical perpetual package manager updates. https://redmine.pfsense.org/issues/6782